| 2008-05-08 14:37:13 |
Joseph Mark Jarvis |
bug |
|
|
added bug |
| 2009-02-03 07:23:38 |
Timo Aaltonen |
apparmor: bugtargetdisplayname |
apparmor (Ubuntu) |
openssh (Ubuntu) |
|
| 2009-02-03 07:23:38 |
Timo Aaltonen |
apparmor: bugtargetname |
apparmor (Ubuntu) |
openssh (Ubuntu) |
|
| 2009-02-03 07:23:38 |
Timo Aaltonen |
apparmor: statusexplanation |
|
moving to openssh, since the patch is needed there?
(I'm currently evaluating apparmor, so would like to confine sshd) |
|
| 2009-02-03 07:23:38 |
Timo Aaltonen |
apparmor: title |
Bug #228229 in apparmor (Ubuntu): "sshd profile does not work out-of-the-box" |
Bug #228229 in openssh (Ubuntu): "sshd profile does not work out-of-the-box" |
|
| 2009-02-03 12:27:58 |
Timo Aaltonen |
openssh: status |
New |
Confirmed |
|
| 2009-02-03 12:27:58 |
Timo Aaltonen |
openssh: title |
Bug #228229 in openssh (Ubuntu): "sshd profile does not work out-of-the-box" |
Bug #228229 in apparmor (Ubuntu): "sshd profile does not work out-of-the-box" |
|
| 2009-02-03 12:27:58 |
Timo Aaltonen |
openssh: importance |
Undecided |
Low |
|
| 2009-02-03 12:27:58 |
Timo Aaltonen |
openssh: bugtargetname |
openssh (Ubuntu) |
apparmor (Ubuntu) |
|
| 2009-02-03 12:27:58 |
Timo Aaltonen |
openssh: statusexplanation |
moving to openssh, since the patch is needed there?
(I'm currently evaluating apparmor, so would like to confine sshd) |
And back to apparmor.. The profile does need some changes, but no modifications to openssh AIUI. Here's what I had to add:
/etc/default/locale r,
/var/cache/nscd/group r,
/var/cache/nscd/passwd r,
/etc/selinux/config r,
/etc/selinux/default/seusers r,
/etc/krb5.conf r,
/etc/krb5.keytab k,
/proc/filesystems r,
/var/tmp/host_* rw,
/var/run/motd r,
/bin/dash Ux,
/bin/zsh4 Ux,
/tmp/krb5cc_* wk,
capability dac_override,
some of those should probably be in abstractions/* |
|
| 2009-02-03 12:27:58 |
Timo Aaltonen |
openssh: bugtargetdisplayname |
openssh (Ubuntu) |
apparmor (Ubuntu) |
|
| 2013-01-03 16:51:15 |
Simon Déziel |
bug |
|
|
added subscriber Simon Déziel |
| 2013-01-03 22:08:04 |
Simon Déziel |
attachment added |
|
Add missing capabilities/rules for usr.sbin.sshd https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/228229/+attachment/3473592/+files/usr.sbin.sshd.patch |
|
| 2013-01-04 00:17:55 |
Ubuntu Foundations Team Bug Bot |
tags |
|
patch |
|
| 2013-01-04 00:18:01 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Review Team |
| 2013-01-05 06:34:07 |
Launchpad Janitor |
branch linked |
|
lp:apparmor |
|
| 2013-01-05 06:34:22 |
Steve Beattie |
bug task added |
|
apparmor |
|
| 2013-01-05 06:34:30 |
Steve Beattie |
apparmor (Ubuntu): status |
Confirmed |
Fix Committed |
|
| 2013-01-05 06:34:42 |
Steve Beattie |
apparmor (Ubuntu): status |
Fix Committed |
Triaged |
|
| 2013-01-05 06:34:48 |
Steve Beattie |
apparmor: status |
New |
Fix Committed |
|
| 2013-01-05 06:37:06 |
Steve Beattie |
apparmor: importance |
Undecided |
Medium |
|
| 2014-04-11 20:09:40 |
Steve Beattie |
apparmor: milestone |
|
2.9.0 |
|
| 2014-04-11 20:16:34 |
Steve Beattie |
apparmor (Ubuntu): status |
Triaged |
Fix Released |
|
| 2014-10-17 23:29:51 |
Steve Beattie |
apparmor: status |
Fix Committed |
Fix Released |
|
