apparmor policy forbids running various /bin/*
Bug #1400306 reported by
Martin Pitt
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apparmor-easyprof-ubuntu-snappy (Ubuntu) |
Fix Released
|
High
|
Jamie Strandboge |
Bug Description
A project of mine calls uname in its wrappers:
/apps/testapp/
[ 993.457524] audit: type=1400 audit(141804272
[ 993.457556] audit: type=1400 audit(141804272
Related branches
summary: |
- apparmor policy forbids running uname + apparmor policy forbids running /bin/uname |
Changed in snappy-ubuntu: | |
assignee: | nobody → Jamie Strandboge (jdstrand) |
summary: |
- apparmor policy forbids running /bin/uname + apparmor policy forbids running various /bin/* |
information type: | Embargoed → Public |
information type: | Public → Private |
description: | updated |
information type: | Private → Public |
description: | updated |
affects: | snappy-ubuntu → apparmor-easyprof-ubuntu-snappy (Ubuntu) |
To post a comment you must log in.
We also currently disallow running /usr/bin/python*.