mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

zgrep: allow executing egrep and fgrep

Browse source 
egrep and fgrep also need to execute grep and write to /dev/tty in the
helper child profile.

Fixes: https://progress.opensuse.org/issues/113108
This commit is contained in:
Christian Boltz 2022-06-28 23:20:10 +02:00
parent 08da556e4e
commit df37c299e1
Failed to generate hash of commit
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
profiles/apparmor.d/zgrep
View file

@ -20,7 +20,9 @@ profile zgrep /usr/bin/{x,}zgrep {
/usr/bin/{ba,da,}sh ix, /usr/bin/{ba,da,}sh ix,
/usr/bin/bzip2 Cx -> helper, /usr/bin/bzip2 Cx -> helper,
/usr/bin/cat ix, /usr/bin/cat ix,
/usr/bin/egrep Cx -> helper,
/usr/bin/expr ix, /usr/bin/expr ix,
/usr/bin/fgrep Cx -> helper,
/usr/bin/grep Cx -> helper, /usr/bin/grep Cx -> helper,
/usr/bin/gzip Cx -> helper, /usr/bin/gzip Cx -> helper,
/usr/bin/mktemp ix, /usr/bin/mktemp ix,
@ -41,9 +43,11 @@ profile zgrep /usr/bin/{x,}zgrep {
capability dac_override, capability dac_override,
capability dac_read_search, capability dac_read_search,
/dev/tty w,
/usr/bin/{ba,da,}sh ix, /usr/bin/{ba,da,}sh ix,
/usr/bin/bzip2 mr, /usr/bin/bzip2 mr,
/usr/bin/grep mr, /usr/bin/grep mrix,
/usr/bin/gzip mr, /usr/bin/gzip mr,
/usr/bin/xz mr, /usr/bin/xz mr,
/usr/bin/zstd mr, /usr/bin/zstd mr,