# vim:syntax=apparmor # ------------------------------------------------------------------ # # Copyright (C) 2019-2021 Mikhail Morfikov # # This program is free software; you can redistribute it and/or # modify it under the terms of version 2 of the GNU General Public # License published by the Free Software Foundation. # # ------------------------------------------------------------------ abi , include @{exec_path} = /{usr/,}sbin/unhide-tcp profile unhide-tcp @{exec_path} { include capability net_bind_service, capability syslog, ptrace (read), @{exec_path} mr, /{usr/,}bin/{,ba,da}sh rix, /{usr/,}bin/sed rix, /{usr/,}bin/ss rix, /{usr/,}bin/netstat rix, /{usr/,}bin/fuser rix, @{PROC}/@{pids}/net/tcp{,6} r, @{PROC}/@{pids}/net/udp{,6} r, @{PROC}/@{pids}/fd/ r, @{PROC}/@{pids}/maps r, # For logs /**/unhide-tcp_[0-9]*-[0-9]*-[0-9]*.log w, include if exists }