apparmor/exec02.profile at master - apparmor - Mike's Git repositories

mir/apparmor

mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00

Christian Boltz 02e2ce0ad9

test exec events/rules in test-libapparmor-test_multi.py

So far, exec events were accidentally skipped in
test-libapparmor-test_multi.py because aa[profile][hat] was not
initialized, and ask_exec() exited early because of this.

Initialize aa[profile][hat] in the test to fix this.

To avoid that someone needs to select "inherit" each time the tests run,
add an optional default_ans parameter to ask_exec(), and let the test
call it with 'CMD_ix'.

(In case you wonder - defaulting to CMD_cx would ask to sanitize the
environment. CMD_ix avoids this.)

Also, we have to copy over aa[profile][hat] to log_dict in the test
because ask_exec() modifies aa[...], but the test only checks its local
log_dict.

Finally, add the expected exec rules to the *.profile files

2024-10-23 19:25:35 +02:00

5 lines

72 B

Plaintext

Raw Permalink Blame History

 /usr/bin/wireshark {
   /usr/lib64/wireshark/extcap/androiddump mrix,
 }