[apparmor] [patch] traceroute and ipv6

Steve Beattie steve at nxnw.org
Tue Nov 29 16:55:48 UTC 2011


On Tue, Nov 29, 2011 at 05:53:52PM +0100, Christian Boltz wrote:
> Hello,
> 
> /usr/sbin/traceroute6 is a symlink to /usr/sbin/traceroute.
> This patch allows "network inet6 raw" in addition to the ipv4 rule.
> 
> References: https://bugzilla.novell.com/show_bug.cgi?id=733312
> 
> === modified file 'profiles/apparmor.d/usr.sbin.traceroute'
> --- profiles/apparmor.d/usr.sbin.traceroute     2011-08-25 22:36:30 
> +++ profiles/apparmor.d/usr.sbin.traceroute     2011-11-29 16:49:56 
> @@ -18,6 +18,7 @@
>    capability net_raw,
>  
>    network inet raw,
> +  network inet6 raw,
>  
>    /usr/sbin/traceroute rmix,
>    @{PROC}/net/route r,

Acked-By: Steve Beattie <sbeattie at ubuntu.com>

Thanks.

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20111129/ef3f65e2/attachment.pgp>


More information about the AppArmor mailing list