From 8cc7b73552d7df44c40d02d06afa8278ce0e78f2 Mon Sep 17 00:00:00 2001 From: Steve Beattie Date: Thu, 1 Dec 2016 17:32:52 -0800 Subject: [PATCH] In testing, I did notice one thing not getting turned up, from netstat -nlp46 output: raw6 0 0 :::58 :::* 7 1326/NetworkManager which when asking netstat to display name resolution ends up being: raw6 0 0 [::]:ipv6-icmp [::]:* 7 1326/NetworkManager Of course, aa-unconfined doesn't show this, the following patch adds that, by adding the raw keyword as an alternative to tcp|udp and accepting a number as an alternative to LISTEN. Signed-off-by: Steve Beattie Acked-by: John Johansen --- utils/aa-unconfined | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/utils/aa-unconfined b/utils/aa-unconfined index e2c11dd2c..fb9085116 100755 --- a/utils/aa-unconfined +++ b/utils/aa-unconfined @@ -43,7 +43,7 @@ pids = [] if paranoid: pids = list(filter(lambda x: re.search(r"^\d+$", x), aa.get_subdirectories("/proc"))) else: - regex_tcp_udp = re.compile(r"^(tcp|udp)6?\s+\d+\s+\d+\s+\S+\:(\d+)\s+\S+\:(\*|\d+)\s+(LISTEN|\s+)\s+(\d+)\/(\S+)") + regex_tcp_udp = re.compile(r"^(tcp|udp|raw)6?\s+\d+\s+\d+\s+\S+\:(\d+)\s+\S+\:(\*|\d+)\s+(LISTEN|\d+|\s+)\s+(\d+)\/(\S+)") import subprocess if sys.version_info < (3, 0): output = subprocess.check_output("LANG=C netstat -nlp46", shell=True).split("\n")