Add profile for iftop (#604)
Some checks failed
Ubuntu / check (push) Has been cancelled
Ubuntu / build (default, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (default, ubuntu-24.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Has been cancelled
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Has been cancelled
Ubuntu / tests (push) Has been cancelled

* Add profile for iftop

* iftop: clean up formatting
This commit is contained in:
doublez13 2024-11-21 14:12:02 -07:00 committed by GitHub
parent 044f80b1db
commit 8efdc5d8e3
Failed to generate hash of commit

View file

@ -0,0 +1,34 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Zane Zakraisek <zz@eng.utah.edu>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/iftop
profile iftop @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
capability net_raw,
network inet dgram,
network inet6 dgram,
network netlink raw,
network packet raw,
@{exec_path} mr,
/usr/share/terminfo/** r,
owner @{HOME}/.iftoprc r,
# When running in promiscuous mode
@{sys}/devices/**/net/*/statistics/* r,
include if exists <local/iftop>
}
# vim:syntax=apparmor