mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
0a52cf81e3
af_unix allows for sockets to be bound to a name that is autogenerated. Currently this type of binding is only supported by a very generic rule. unix (bind) type=dgram, but this allows both sockets with specified names and anonymous sockets. Extend unix rule syntax to support specifying just an auto bind socket by specifying addr=auto eg. unix (bind) addr=auto, It is important to note that addr=auto only works for the bind permission as once the socket is bound to an autogenerated address, the addr with have a valid unique value that can be matched against with a regular addr=@name expression Fixes: https://bugs.launchpad.net/apparmor/+bug/1867216 MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/521 Signed-off-by: John Johansen <john.johansen@canonical.com> |
||
|---|---|---|
| .. | ||
| abi | ||
| bare_include_tests | ||
| capability | ||
| change_hat | ||
| change_profile | ||
| conditional | ||
| dbus | ||
| file | ||
| include_tests | ||
| includes | ||
| includes-preamble | ||
| mount | ||
| network | ||
| profile | ||
| ptrace | ||
| rewrite | ||
| rlimits | ||
| signal | ||
| unix | ||
| vars | ||
| xattrs | ||
| xtrans | ||
| readme | ||
Directory for auto generated x-transition tests