mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 01:57:43 +00:00
114 lines
4.5 KiB
Plaintext
114 lines
4.5 KiB
Plaintext
# /etc/mfsprofile
|
|
#
|
|
# This is the codomain description file.
|
|
#
|
|
# Codomain descriptions should be of the following format:
|
|
#
|
|
# Commented lines begin with #
|
|
#
|
|
# /path/program_name {
|
|
# /path/resource access_mode digital_signature_if_exe
|
|
# /path/resource access_mode digital_signature_if_exe
|
|
# /path/resource access_mode digital_signature_if_exe
|
|
# }
|
|
#
|
|
# Access modes consist of four possible entries: r(ead), w(rite),
|
|
# x(ecute) and i(nherit) (which is the default anyway).
|
|
#
|
|
# A really limited lame form of name_globbing exists: Any
|
|
# description with a * will match anything following it. E.g.
|
|
# a resource of "/foo/bar* r" will grant read access to the
|
|
# following:
|
|
# /foo/barnyard_animals.gif
|
|
# /foo/barf/baz/biff/blah
|
|
# The exception: it will not match things that contain /../ so it
|
|
# will not match
|
|
# /foo/bar/../../etc/passwd
|
|
# This should be improved/made slightly more sophisticated.
|
|
#
|
|
# For subdomains, define a codomain for the main program (a
|
|
# default), then define subdomains in the form of:
|
|
# /path/to/program^subdomain_ident { \n .... }
|
|
# with resources on subsequent lines.
|
|
#
|
|
# microbenchmarks for subdomain
|
|
#
|
|
# Attempt to use md5sum as a prefetching microbenchmark. Sadly, it
|
|
# didn't work.
|
|
#
|
|
# /usr/bin/md5sum {
|
|
#/etc/ld.so.cache r
|
|
#/lib/lib* r
|
|
#/usr/lib/netscape/netscape-communicator r
|
|
# }
|
|
#
|
|
# /bin/gzip {
|
|
#/etc/ld.so.cache r
|
|
#/lib/lib* r
|
|
#/tmp/netscape-communicator r
|
|
#/tmp/netscape-communicator.gz w
|
|
# }
|
|
#
|
|
# /usr/bin/bzip2 {
|
|
#/etc/ld.so.cache r
|
|
#/lib/lib* r
|
|
#/usr/lib/netscape/netscape-communicator r
|
|
# }
|
|
#
|
|
#
|
|
/usr/src/codomain-1.2.0-pre2/testprogs/foo.sh {
|
|
/dev/urandom r
|
|
./bad r
|
|
12345678901234567890123456789012345678901234567890123456789012345678901 r
|
|
123456789012345678901234567890123456789012345678901234567890123456789012 r
|
|
1234567890123456789012345678901234567890123456789012345678901234567890123 r
|
|
12345678901234567890123456789012345678901234567890123456789012345678901234 r
|
|
123456789012345678901234567890123456789012345678901234567890123456789012345 r
|
|
1234567890123456789012345678901234567890123456789012345678901234567890123456 r
|
|
12345678901234567890123456789012345678901234567890123456789012345678901234567 r
|
|
123456789012345678901234567890123456789012345678901234567890123456789012345678 r
|
|
1234567890123456789012345678901234567890123456789012345678901234567890123456789 r
|
|
12345678901234567890123456789012345678901234567890123456789012345678901234567890 r
|
|
12345678901234567890123456789012345678901234567890123456789012 r
|
|
123456789012345678901234567890123456789012345678901234567890123 r
|
|
1234567890123456789012345678901234567890123456789012345678901234 r
|
|
12345678901234567890123456789012345678901234567890123456789012345 r
|
|
123456789012345678901234567890123456789012345678901234567890123456 r
|
|
1234567890123456789012345678901234567890123456789012345678901234567 r
|
|
12345678901234567890123456789012345678901234567890123456789012345678 r
|
|
123456789012345678901234567890123456789012345678901234567890123456789 r
|
|
1234567890123456789012345678901234567890123456789012345678901234567890 r
|
|
1234567890123456789012345678901234567890123456789012345678901 r
|
|
123456789012345678901234567890123456789012345678901234567890 r
|
|
12345678901234567890123456789012345678901234567890123456789 r
|
|
1234567890123456789012345678901234567890123456789012345678 r
|
|
123456789012345678901234567890123456789012345678901234567 r
|
|
12345678901234567890123456789012345678901234567890123456 r
|
|
1234567890123456789012345678901234567890123456789012345 r
|
|
123456789012345678901234567890123456789012345678901234 r
|
|
12345678901234567890123456789012345678901234567890123 r
|
|
1234567890123456789012345678901234567890123456789012 r
|
|
123456789012345678901234567890123456789012345678901 r
|
|
12345678901234567890123456789012345678901234567890 r
|
|
1234567890123456789012345678901234567890123456789 r
|
|
123456789012345678901234567890123456789012345678 r
|
|
12345678901234567890123456789012345678901234567 r
|
|
1234567890123456789012345678901234567890123456 r
|
|
123456789012345678901234567890123456789012345 r
|
|
12345678901234567890123456789012345678901234 r
|
|
1234567890123456789012345678901234567890123 r
|
|
123456789012345678901234567890123456789012 r
|
|
12345678901234567890123456789012345678901 r
|
|
1234567890123456789012345678901234567890 r
|
|
123456789012345678901234567890123456789 r
|
|
}
|
|
#
|
|
# Roxen
|
|
#
|
|
/usr/src/codomain-1.2.0-pre2/testprogs/foo.sh {
|
|
/dev/urandom r
|
|
./bad r
|
|
12345678901234567890123456789012345678901234567890123456789012345678901 r
|
|
123456789012345678901234567890123456789012345678901234567890123456789012 r
|
|
}
|