mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 16:35:02 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix sbin.dhclient profile

Browse source
This commit is contained in:
Anton Nesterov 2020-06-12 15:54:06 +00:00
parent e15fdd1be9
commit 48d9414776
1 changed files with 13 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
profiles/apparmor/profiles/extras/sbin.dhclient
View file

@ -33,6 +33,8 @@ profile dhclient /{usr/,}sbin/dhclient {
network packet packet, network packet packet,
network packet raw, network packet raw,
signal (send,receive) set=(term) peer=NetworkManager,
/{usr/,}sbin/dhclient mrix, /{usr/,}sbin/dhclient mrix,
/{usr/,}bin/bash mrix, /{usr/,}bin/bash mrix,
@ -41,6 +43,7 @@ profile dhclient /{usr/,}sbin/dhclient {
/{usr/,}bin/ps mrix, /{usr/,}bin/ps mrix,
/dev/random r, /dev/random r,
/etc/dhclient.conf r, /etc/dhclient.conf r,
/etc/openssl.cnf r,
@{PROC}/ r, @{PROC}/ r,
@{PROC}/interrupts r, @{PROC}/interrupts r,
@{PROC}/@{pid}/net/dev r, @{PROC}/@{pid}/net/dev r,
@ -48,21 +51,21 @@ profile dhclient /{usr/,}sbin/dhclient {
# following rule shouldn't work, self is a symlink # following rule shouldn't work, self is a symlink
@{PROC}/self/status r, @{PROC}/self/status r,
/{usr/,}sbin/arp mrix, /{usr/,}sbin/arp mrix,
/usr/bin/dig mrix, /{usr/,}bin/dig mrix,
/usr/bin/uptime mrix, /{usr/,}bin/uptime mrix,
/usr/bin/vmstat mrix, /{usr/,}bin/vmstat mrix,
/usr/bin/w mrix, /{usr/,}bin/w mrix,
/usr/lib/nm-dhcp-helper rix, /usr/lib/{NetworkManager/,}nm-dhcp-helper rix,
/var/lib/dhclient/dhclient{6,}.leases* rw, /var/lib/dhclient/dhclient{6,}.leases* rw,
/var/lib/dhcp/dhclient*.leases rw, /var/lib/dhcp/dhclient*.leases rw,
/var/lib/dhcp6/dhclient.leases rw, /var/lib/dhcp6/dhclient.leases rw,
/var/lib/NetworkManager/dhclient-*.conf r, /var/lib/NetworkManager/dhclient{6,}-*.conf r,
/var/lib/NetworkManager/dhclient-*.lease rw, /var/lib/NetworkManager/dhclient{6,}-*.lease rw,
/var/log/lastlog r, /var/log/lastlog r,
/var/log/messages r, /var/log/messages r,
/var/log/wtmp r, /var/log/wtmp r,
/{,var/}run/dhclient.pid rw, /{,var/}run/dhclient{6,}.pid rw,
/{,var/}run/dhclient-*.pid rw, /{,var/}run/dhclient{6,}-*.pid rw,
/var/spool r, /var/spool r,
/var/spool/mail r, /var/spool/mail r,
@ -79,4 +82,5 @@ profile dhclient /{usr/,}sbin/dhclient {
/var/lib/dhcp/* rw, /var/lib/dhcp/* rw,
/{,var/}run/nm-dhclient-*.conf r, /{,var/}run/nm-dhclient-*.conf r,
include if exists <local/sbin.dhclient>
} }