Soru apparmor: Birden çok uygulama için aynı profil


Bende var:

#include <tunables/global>

/usr/bin/python2.7 {
    /** mixrw,
    deny /** lwk,
}

/usr/lib/jvm/java-6-openjdk/jre/bin/java {
    /** mixrw,
    deny /** lwk,
}

/var/www/service/usercode/*/a.out {
    /** mixrw,
    #deny /** lwk,
}

Böyle bir şeyi nasıl yapabilirim?

#include <tunables/global>

/usr/bin/python2.7 
/usr/lib/jvm/java-6-openjdk/jre/bin/java
/var/www/service/usercode/*/a.out
{
    /** mixrw,
    deny /** lwk,
}

11
2017-10-08 10:54


Menşei




Cevaplar:


#include <tunables/global>

/usr/bin/python2.7 {
#include <abstractions/mystuff1>
}

/usr/lib/jvm/java-6-openjdk/jre/bin/java {
#include <abstractions/mystuff1>
}

/var/www/service/usercode/*/a.out {
#include <abstractions/mystuff1>
}

(ve sonra ortak şeyler koymak abstractions/mystuff1, tabii ki)


0
2017-08-08 02:14