[apparmor] [PATCH] make aa-unconfined include ipv6

[Christian Boltz]

Helo,

Am Freitag, 9. Dezember 2016, 23:09:03 CET schrieb Steve Beattie:
> On Sat, Dec 10, 2016 at 12:21:06AM +0100, Christian Boltz wrote:
> > Am Donnerstag, 1. Dezember 2016, 16:13:26 CET schrieb John Johansen:
> > > aa-unconfined currently does not check/display ipv6 fix this
> > > 
> > > Signed-off-by: John Johansen <john.johansen at canonical.com>
> > > 
> > > === modified file 'utils/aa-unconfined'
> > > --- utils/aa-unconfined	2016-10-01 18:57:09 +0000
> > > +++ utils/aa-unconfined	2016-12-02 00:09:27 +0000
> > 
> > ...
> > 
> > > -        output = subprocess.check_output("LANG=C netstat -nlp",
> > > shell=True).split("\n")
> > > +        output =
> > > subprocess.check_output("LANG=C netstat -nlp46",
> > 
> > Unfortunately this breaks aa-unconfined on openSUSE:
> >     netstat: invalid option -- '4'
> > 
> > (netstat is from net-tools-deprecated-1.60-770.1.x86_64)
> > 
> > Looks like we'll need to find another solution...
> 
> Is the ss(8) http://manpages.ubuntu.com/manpages/xenial/man8/ss.8.html
> tool available? It's from iproute2
> https://wiki.linuxfoundation.org/networking/iproute2 and serves a
> similar purpose.

Yes, it's available (package iproute2) on Tumbleweed and Leap, so it 
sounds like a good alternative.

I never used 'ss', so I'd prefer if someone who knows it sends a patch 
;-)


Regards,

Christian Boltz
-- 
> Besteht die Möglichkeit irgendwo ein GUI für Skeleton "downzuloaden"?
Wieso downloaden? /etc/init.d/skeleton ist ne Textdatei, guis liefert
SuSE da jede Menge für mit, kwrite, xemacs, kvim, ...
[> Matthias Reinhardt und Manfred Tremmel in suse-linux]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20161210/ab409e02/attachment.pgp>