[apparmor] [patch] traceroute and ipv6

Christian Boltz apparmor at cboltz.de
Tue Nov 29 16:53:52 UTC 2011


Hello,

/usr/sbin/traceroute6 is a symlink to /usr/sbin/traceroute.
This patch allows "network inet6 raw" in addition to the ipv4 rule.

References: https://bugzilla.novell.com/show_bug.cgi?id=733312

=== modified file 'profiles/apparmor.d/usr.sbin.traceroute'
--- profiles/apparmor.d/usr.sbin.traceroute     2011-08-25 22:36:30 
+++ profiles/apparmor.d/usr.sbin.traceroute     2011-11-29 16:49:56 
@@ -18,6 +18,7 @@
   capability net_raw,
 
   network inet raw,
+  network inet6 raw,
 
   /usr/sbin/traceroute rmix,
   @{PROC}/net/route r,



Regards,

Christian Boltz
-- 
Meeting, n.:
    An assembly of people coming together to decide what person or
    department not represented in the room must solve a problem.




More information about the AppArmor mailing list