[apparmor] [patch] traceroute and ipv6
Christian Boltz
apparmor at cboltz.de
Tue Nov 29 16:53:52 UTC 2011
Hello,
/usr/sbin/traceroute6 is a symlink to /usr/sbin/traceroute.
This patch allows "network inet6 raw" in addition to the ipv4 rule.
References: https://bugzilla.novell.com/show_bug.cgi?id=733312
=== modified file 'profiles/apparmor.d/usr.sbin.traceroute'
--- profiles/apparmor.d/usr.sbin.traceroute 2011-08-25 22:36:30
+++ profiles/apparmor.d/usr.sbin.traceroute 2011-11-29 16:49:56
@@ -18,6 +18,7 @@
capability net_raw,
network inet raw,
+ network inet6 raw,
/usr/sbin/traceroute rmix,
@{PROC}/net/route r,
Regards,
Christian Boltz
--
Meeting, n.:
An assembly of people coming together to decide what person or
department not represented in the room must solve a problem.
More information about the AppArmor
mailing list