From aa74b9b12d9ed55909489403a0c2514b9ea6a95f Mon Sep 17 00:00:00 2001 From: Christian Boltz Date: Mon, 3 Jun 2024 20:06:34 +0000 Subject: [PATCH] Merge abstractions/nameservice: allow reading @{PROC}/@{pid}/net/ipv6_route This file contains the same kind of information as @{PROC}/@{pid}/net/route and both files are world readable: ``` $ ls -l /proc/self/net/*route -r--r--r-- 1 root root 0 Jun 3 15:33 /proc/self/net/ipv6_route -r--r--r-- 1 root root 0 Jun 3 15:33 /proc/self/net/route ``` Signed-off-by: Simon Deziel MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1246 Approved-by: Christian Boltz Merged-by: Christian Boltz (cherry picked from commit 5adeb86bbe6d64fde09cef14ccc351adcbe170ec) 7770cd71 abstractions/nameservice: allow reading @{PROC}/@{pid}/net/ipv6_route Co-authored-by: Christian Boltz --- profiles/apparmor.d/abstractions/nameservice | 1 + 1 file changed, 1 insertion(+) diff --git a/profiles/apparmor.d/abstractions/nameservice b/profiles/apparmor.d/abstractions/nameservice index 409d8526c..9e0769467 100644 --- a/profiles/apparmor.d/abstractions/nameservice +++ b/profiles/apparmor.d/abstractions/nameservice @@ -116,6 +116,7 @@ network netlink raw, # interface details + @{PROC}/@{pid}/net/ipv6_route r, @{PROC}/@{pid}/net/route r, # Include additions to the abstraction