mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00
Code Issues Releases Wiki Activity

Merge Add dnstracer profile

Browse Source 
Add profile for `dnstracer`. The profile has been tested with `dnstracer` for oracular i.e. version `1.9-8build1`.

Signed-off-by: vyomydv <vyom.yadav@canonical.com>

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1366
Approved-by: Georgia Garcia <georgia.garcia@canonical.com>
Approved-by: Maxime Bélair <maxime.belair@canonical.com>
Merged-by: Maxime Bélair <maxime.belair@canonical.com>
This commit is contained in:
Maxime Bélair 2025-06-23 08:09:56 +00:00
commit 2c685c0a17
1 changed files with 32 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
profiles/apparmor.d/dnstracer Normal file
View File

@ -0,0 +1,32 @@
#------------------------------------------------------------------
# Copyright (C) 2024 Canonical Ltd.
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#------------------------------------------------------------------
# vim: ft=apparmor
#
abi <abi/4.0>,
include <tunables/global>
profile dnstracer /usr/bin/dnstracer {
include <abstractions/base>
include <abstractions/nameservice-strict>
network (bind,connect,create,receive,send,setopt) inet dgram,
network (bind,connect,create,receive,send,setopt) inet6 dgram,
/usr/bin/dnstracer mr,
@{run}/.nscd_socket rw,
@{run}/nscd/socket rw,
# nss can be configured to use libvirt in host resolution
/var/lib/libvirt/dnsmasq/ r,
/var/lib/libvirt/dnsmasq/*.status r,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/dnstracer>
}