[apparmor] [patch] Add python to the "no Px rule" list in logprof.conf

John Johansen john.johansen at canonical.com
Wed Nov 18 00:18:02 UTC 2015


On 11/17/2015 03:53 PM, Christian Boltz wrote:
> Hello,
> 
> $subject.
> 
> To make things more interesting, /usr/bin/python and /usr/bin/python[23]
> are symlinks to /usr/bin/python[23].[0-9], so we have to explicitely
> list several versions.
> 
> If you think I missed an important/wide-spread python version number,
> please tell me so that I can add it.
> 
> 
> I propose this patch for trunk and 2.9.
> 
> 
> (On the long term, we might want regex support here, but that's another
> story - and I'm not sure yet if it's worth the effort.)
> 
> 
> [ utils-logprof.conf.diff ]
> 
> === modified file 'utils/logprof.conf'
> --- utils/logprof.conf  2014-08-21 00:14:24 +0000
> +++ utils/logprof.conf  2015-11-17 23:41:48 +0000
> @@ -106,6 +106,12 @@
>    /usr/bin/killall = icn
>    /usr/bin/nice = icn
>    /usr/bin/perl = icn
> +  /usr/bin/python       = icn
> +  /usr/bin/python2      = icn
> +  /usr/bin/python2.7    = icn
> +  /usr/bin/python3      = icn
> +  /usr/bin/python3.3    = icn
> +  /usr/bin/python3.4    = icn
>    /usr/bin/tr   = icn
>  
>  [required_hats]
> 
> 

Acked-by: John Johansen <john.johansen at canonical.com>




More information about the AppArmor mailing list