mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 09:21:00 +01:00
08471c5b08
The latest iputils merged ping and ping6 into a single binary that does both IPv4 and IPv6 pings (by default, it really does both). This means we need to allow network inet6 raw in the ping profile. References: https://bugzilla.opensuse.org/show_bug.cgi?id=980596 (contains more details and example output) Acked-by: Steve Beattie <steve@nxnw.org> for trunk, 2.10 and 2.9
28 lines
806 B
Text
28 lines
806 B
Text
# ------------------------------------------------------------------
|
|
#
|
|
# Copyright (C) 2002-2009 Novell/SUSE
|
|
# Copyright (C) 2010 Canonical Ltd.
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of version 2 of the GNU General Public
|
|
# License published by the Free Software Foundation.
|
|
#
|
|
# ------------------------------------------------------------------
|
|
|
|
#include <tunables/global>
|
|
/{usr/,}bin/ping {
|
|
#include <abstractions/base>
|
|
#include <abstractions/consoles>
|
|
#include <abstractions/nameservice>
|
|
|
|
capability net_raw,
|
|
capability setuid,
|
|
network inet raw,
|
|
network inet6 raw,
|
|
|
|
/{,usr/}bin/ping mixr,
|
|
/etc/modules.conf r,
|
|
|
|
# Site-specific additions and overrides. See local/README for details.
|
|
#include <local/bin.ping>
|
|
}
|