On Fri, Jan 13, 2017 at 04:55:01PM +0100, daniel curtis wrote:
> owner @{PROC}/*/net/tcp6 r,
> owner @{PROC}/*/net/udp6 r,
> owner @{PROC}/*/net/raw6 r,

> What is the best solution in this situation? :- )

Hi Daniel, I've thought about it a bit more, and I think you should add
these rules:

  @{PROC}/*/net/tcp6 r,
  @{PROC}/*/net/udp6 r,
  @{PROC}/*/net/raw6 r,

The 'owner' prefix would make netstat report information only for
root. But non-privileged users expect netstat to show their own processes.

Thanks

Attachment: signature.asc
Description: PGP signature

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to