mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 05:47:59 +00:00
Code Issues Releases Wiki Activity

allow inet6 in ping profile

Browse Source 
The latest iputils merged ping and ping6 into a single binary that does
both IPv4 and IPv6 pings (by default, it really does both).
This means we need to allow network inet6 raw in the ping profile.

References: https://bugzilla.opensuse.org/show_bug.cgi?id=980596
            (contains more details and example output)


Acked-by: Steve Beattie <steve@nxnw.org> for trunk, 2.10 and 2.9
This commit is contained in:
Christian Boltz 2016-05-18 21:18:34 +02:00
parent ad169656bf
commit 0125d04924
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
profiles/apparmor.d/bin.ping
View File

@ -18,6 +18,7 @@
capability net_raw, capability net_raw,
capability setuid, capability setuid,
network inet raw, network inet raw,
network inet6 raw,
/{,usr/}bin/ping mixr, /{,usr/}bin/ping mixr,
/etc/modules.conf r, /etc/modules.conf r,