mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00

This patch adds a bunch of language parsing tests for ptrace rules. Signed-off-by: Steve Beattie <steve@nxnw.org> Acked-by: John Johansen <john.johansen@canonical.com>
15 lines
388 B
Text
15 lines
388 B
Text
#
|
|
#=Description ptrace peer w/perms and misc modifiers rule
|
|
#=EXRESULT PASS
|
|
#
|
|
|
|
/usr/bin/foo {
|
|
deny ptrace read peer=/bin/sh,
|
|
allow ptrace write peer=/bin/true,
|
|
audit ptrace trace peer=/bin/false,
|
|
audit deny ptrace readby peer=/sbin/init,
|
|
audit allow ptrace tracedby peer=/usr/bin/gdb,
|
|
ptrace rw peer=/usr/bin/top,
|
|
deny ptrace (readby, tracedby) peer=/usr/bin/valgrind,
|
|
|
|
}
|