[apparmor] [PATCH] make aa-unconfined include ipv6

[Steve Beattie]

On Sat, Dec 10, 2016 at 12:21:06AM +0100, Christian Boltz wrote:
> Am Donnerstag, 1. Dezember 2016, 16:13:26 CET schrieb John Johansen:
> > aa-unconfined currently does not check/display ipv6 fix this
> > 
> > Signed-off-by: John Johansen <john.johansen at canonical.com>
> > 
> > === modified file 'utils/aa-unconfined'
> > --- utils/aa-unconfined	2016-10-01 18:57:09 +0000
> > +++ utils/aa-unconfined	2016-12-02 00:09:27 +0000
> ...
> > -        output = subprocess.check_output("LANG=C netstat -nlp",
> > shell=True).split("\n") 
> > +        output =
> > subprocess.check_output("LANG=C netstat -nlp46",
> 
> Unfortunately this breaks aa-unconfined on openSUSE:
>     netstat: invalid option -- '4'
> 
> (netstat is from net-tools-deprecated-1.60-770.1.x86_64)
> 
> Looks like we'll need to find another solution...

Is the ss(8) http://manpages.ubuntu.com/manpages/xenial/man8/ss.8.html
tool available? It's from iproute2
https://wiki.linuxfoundation.org/networking/iproute2 and serves a
similar purpose.

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161209/447ce601/attachment.pgp>