mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 00:14:44 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge zgrep: allow executing egrep and fgrep

Browse source 
egrep and fgrep also need to execute grep and write to /dev/tty in the
helper child profile.

Fixes: https://progress.opensuse.org/issues/113108

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/892
Approved-by: Jon Tourville <jon.tourville@canonical.com>
Merged-by: Christian Boltz <apparmor@cboltz.de>
This commit is contained in:
Christian Boltz 2022-06-29 13:25:14 +00:00
commit 57eebd6cdb
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
profiles/apparmor.d/zgrep
View file

@ -20,7 +20,9 @@ profile zgrep /usr/bin/{x,}zgrep {
/usr/bin/{ba,da,}sh ix,
/usr/bin/bzip2 Cx -> helper,
/usr/bin/cat ix,
/usr/bin/egrep Cx -> helper,
/usr/bin/expr ix,
/usr/bin/fgrep Cx -> helper,
/usr/bin/grep Cx -> helper,
/usr/bin/gzip Cx -> helper,
/usr/bin/mktemp ix,
@ -41,9 +43,11 @@ profile zgrep /usr/bin/{x,}zgrep {
capability dac_override,
capability dac_read_search,
/dev/tty w,
/usr/bin/{ba,da,}sh ix,
/usr/bin/bzip2 mr,
/usr/bin/grep mr,
/usr/bin/grep mrix,
/usr/bin/gzip mr,
/usr/bin/xz mr,
/usr/bin/zstd mr,