sshd profile missing some permissions (patch)

Bug #1485850 reported by raf
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
AppArmor
New
Undecided
Unassigned

Bug Description

The usr.sbin.sshd profile (as seen on debian8) is missing a few permissions:
Specifically:

  capability audit_write,
  /bin/zsh5 rUx,
  @{PROC}/@{pid}/loginuid r,
  /tmp/ssh-*[a-zA-Z0-9]*/ rw,

A patch is attached.

Tags: aa-policy
Revision history for this message
raf (9-ubu8tu-9) wrote :
Revision history for this message
intrigeri (intrigeri) wrote :

This profile is shipped in the apparmor-profiles package, which is part of the apparmor project.

affects: apparmor-profiles → apparmor
Christian Boltz (cboltz)
tags: added: aa-policy
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.