tcpdump apparmor profile should use 'audit deny' instead of 'deny'
Bug #348592 reported by
Jamie Strandboge
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
tcpdump (Ubuntu) |
Fix Released
|
Low
|
Jamie Strandboge |
Bug Description
Binary package hint: tcpdump
Ie:
audit deny @{HOME}/.* mrwkl,
audit deny @{HOME}/.*/ rw,
audit deny @{HOME}/.*/** mrwkl,
audit deny @{HOME}/bin/ rw,
audit deny @{HOME}/bin/** mrwkl,
This will help users if they can't access these files, and not mask when tcpdump might be misbehaving.
Related branches
To post a comment you must log in.
I'll upload this after beta is released.