mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #9 from nobodysu/bind-utils

Browse Source 
bind-utils: add host and nslookup.
This commit is contained in:
Alex 2022-01-22 12:12:24 +01:00 committed by GitHub
commit 16096bbd85
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 54 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
apparmor.d/profiles-a-f/dig
View File

@ -24,9 +24,13 @@ profile dig @{exec_path} {
@{exec_path} mr,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
owner @{HOME}/.digrc r,
owner @{HOME}/batch_mode.dig r,
owner @{HOME}/tsig.key r,
/tmp/batch_mode.dig r,
owner @{PROC}/@{pids}/task/@{tid}/comm rw,
include if exists <local/dig>
}

24
apparmor.d/profiles-g-l/host Normal file
View File

@ -0,0 +1,24 @@
# apparmor.d - Full set of apparmor profiles
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{,usr/}bin/host
profile host @{exec_path} {
include <abstractions/base>
include <abstractions/openssl>
include <abstractions/nameservice-strict>
network inet dgram,
network inet6 dgram,
network inet stream,
network inet6 stream,
@{exec_path} r,
owner @{PROC}/@{pids}/task/@{tid}/comm rw,
include if exists <local/host>
}

24
apparmor.d/profiles-m-r/nslookup Normal file
View File

@ -0,0 +1,24 @@
# apparmor.d - Full set of apparmor profiles
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{,usr/}bin/nslookup
profile nslookup @{exec_path} {
include <abstractions/base>
include <abstractions/openssl>
include <abstractions/nameservice-strict>
network inet dgram,
network inet6 dgram,
network inet stream,
network inet6 stream,
@{exec_path} r,
owner @{PROC}/@{pids}/task/@{tid}/comm rw,
include if exists <local/nslookup>
}