mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-28 12:58:07 +00:00
Code Issues Releases Wiki Activity

profiles/apparmor.d: add ssh-keyscan profile

Browse Source 
Signed-off-by: Evan Caville <evan.caville@canonical.com>
This commit is contained in:
Evan Caville 2025-03-27 16:19:54 +10:00
parent bd46a02e47
commit 260ef98a95
1 changed files with 33 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
profiles/apparmor.d/ssh-keyscan Normal file
View File

@ -0,0 +1,33 @@
#------------------------------------------------------------------
# Copyright (C) 2025 Canonical Ltd.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#------------------------------------------------------------------
# vim: ft=apparmor
#
abi <abi/4.0>,
include <tunables/global>
profile ssh-keyscan /usr/bin/ssh-keyscan {
include <abstractions/base>
include <abstractions/nameservice-strict>
network inet dgram,
network inet6 dgram,
network inet stream,
network inet6 stream,
network netlink raw,
# By default, limit file options to the following dirs
file r @{HOME}/.ssh/{,**},
# Allow executable mapping and read for the binary
file mr /usr/bin/ssh-keyscan,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/ssh-keyscan>
}