Comment 2 for bug 217710

Revision history for this message
Adilson Oliveira (agoliveira) wrote :

Looks like AppArmor is on the way
* AppArmor: implement mmap_min_addr check as done in mainline.
According to the kernel logs.
I tried to create a dosemu profile but it didn't work:
# Last Modified: Tue Apr 15 10:53:53 2008
#include <tunables/global>
/usr/bin/dosemu {
  #include <abstractions/base>

  /bin/dash ixr,
  /bin/mkdir ixr,
  /dev/shm/dosemu_13075 w,
  /dev/shm/dosemu_13427 w,
  /dev/shm/dosemu_13720 w,
  /dev/shm/dosemu_13814 w,
  /dev/shm/dosemu_14158 w,
  /dev/shm/dosemu_14412 w,
  /dev/shm/dosemu_14584 w,
  /dev/shm/dosemu_15211 w,
  /dev/shm/dosemu_15321 w,
  /dev/shm/dosemu_15664 w,
  /etc/dosemu/dosemu.conf r,
  /etc/dosemu/dosemu.users r,
  /home/*/.dosemu/boot.log w,
  /home/*/.dosemu/drives/ r,
  /proc/*/maps r,
  /proc/*/mounts r,
  /proc/cpuinfo r,
  /proc/filesystems r,
  /usr/bin/basename ixr,
  /usr/bin/dosemu mr,
  /usr/bin/dosemu.bin mpxr,
  /usr/bin/id ixr,
  /usr/share/locale-langpack/pt_BR/LC_MESSAGES/libc.mo r,
}