mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(profile): ufw can't determine iptables version

Browse Source 
fix #485
This commit is contained in:
Alexandre Pujol 2024-09-14 15:28:18 +01:00
parent 09401567a4
commit 58783e06cb
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
1 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
apparmor.d/profiles-s-z/ufw
View File

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 EricLin <ericlin050914@gmail.com> # Copyright (C) 2024 EricLin <ericlin050914@gmail.com>
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>, abi <abi/3.0>,
@ -9,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/ufw @{exec_path} = @{bin}/ufw
profile ufw @{exec_path} { profile ufw @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>
@ -22,16 +24,16 @@ profile ufw @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
@{bin}/ r, @{bin}/ r,
@{bin}/cat ix,
@{bin}/env r, @{bin}/env r,
@{bin}/python3.@{int} ix, @{bin}/python3.@{int} ix,
@{bin}/cat ix, @{bin}/xtables-legacy-multi ix,
@{bin}/xtables-nft-multi ix, @{bin}/xtables-nft-multi ix,
@{lib}/ufw/ufw-init ix, @{lib}/ufw/ufw-init ix,
/etc/ufw/{,**} rwk,
/etc/default/ufw r, /etc/default/ufw r,
/etc/ufw/ rw,
/etc/ufw/** rwk,
owner @{run}/ufw.lock rwk, owner @{run}/ufw.lock rwk,
@ -40,12 +42,9 @@ profile ufw @{exec_path} {
owner @{tmp}/???????? rw, owner @{tmp}/???????? rw,
owner @{tmp}/tmp???????? rw, owner @{tmp}/tmp???????? rw,
@{PROC}/@{pid}/stat r,
@{PROC}/@{pid}/fd/ r, @{PROC}/@{pid}/fd/ r,
@{PROC}/@{pid}/net/ip_tables_names r, @{PROC}/@{pid}/net/ip_tables_names r,
@{PROC}/@{pid}/stat r,
/dev/pts/[0-9]* rw,
/dev/tty rw,
include if exists <local/ufw> include if exists <local/ufw>