diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/apparmor/apparmor.d/usr.bin.tcpdump | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/usr.bin.tcpdump')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/usr.bin.tcpdump | 71 |
1 files changed, 0 insertions, 71 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/usr.bin.tcpdump b/straper/db/public/apparmor/apparmor.d/usr.bin.tcpdump deleted file mode 100644 index 510a5ad..0000000 --- a/straper/db/public/apparmor/apparmor.d/usr.bin.tcpdump +++ /dev/null @@ -1,71 +0,0 @@ -# vim:syntax=apparmor -#include <tunables/global> - -profile tcpdump /usr/bin/tcpdump { - #include <abstractions/base> - #include <abstractions/nameservice> - #include <abstractions/user-tmp> - - capability net_raw, - capability setuid, - capability setgid, - capability dac_override, - capability chown, - network raw, - network packet, - - # for -D - @{PROC}/bus/usb/ r, - @{PROC}/bus/usb/** r, - - # for finding an interface - /dev/ r, - @{PROC}/[0-9]*/net/dev r, - /sys/bus/usb/devices/ r, - /sys/class/net/ r, - /sys/devices/**/net/** r, - - # for -j - capability net_admin, - - # for tracing USB bus, which libpcap supports - /dev/usbmon* r, - /dev/bus/usb/ r, - /dev/bus/usb/** r, - - # for init_etherarray(), with -e - /etc/ethers r, - - # for USB probing (see libpcap-1.1.x/pcap-usb-linux.c:probe_devices()) - /dev/bus/usb/**/[0-9]* w, - - # for -z - /{usr/,}bin/gzip ixr, - /{usr/,}bin/bzip2 ixr, - - # for -F and -w - audit deny @{HOME}/.* mrwkl, - audit deny @{HOME}/.*/ rw, - audit deny @{HOME}/.*/** mrwkl, - audit deny @{HOME}/bin/ rw, - audit deny @{HOME}/bin/** mrwkl, - owner @{HOME}/ r, - owner @{HOME}/** rw, - - # for -r, -F and -w - /**.[pP][cC][aA][pP] rw, - /**.[pP][cC][aA][pP][nN][gG] rw, - /**.[cC][aA][pP] rw, - # -W adds a numerical suffix - /**.[pP][cC][aA][pP][0-9]* rw, - /**.[pP][cC][aA][pP][nN][gG][0-9]* rw, - /**.[cC][aA][pP][0-9]* rw, - - # for convenience with -r (ie, read pcap files from other sources) - /var/log/snort/*log* r, - - /usr/bin/tcpdump mr, - - # Site-specific additions and overrides. See local/README for details. - #include <local/usr.bin.tcpdump> -} |
