pool/apparmor
SHA256
3
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 973180 from security:apparmor

Browse Source 
- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922). (forwarded request 973084 from dimstar)

OBS-URL: https://build.opensuse.org/request/show/973180
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apparmor?expand=0&rev=170
This commit is contained in:
Dominique Leuenberger 2022-04-29 22:45:00 +00:00 committed by Git OBS Bridge
commit bd3c466f84
2 changed files with 12 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apparmor.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Wed Apr 27 10:07:47 UTC 2022 - Dominique Leuenberger <dimstar@opensuse.org>
- Enhance zgrep-profile-mr870.diff to also allow/support zstd
(boo#1198922).
-------------------------------------------------------------------
Sat Apr 16 20:33:13 UTC 2022 - Christian Boltz <suse-beta@cboltz.de>

11
zgrep-profile-mr870.diff
View File

@ -13,12 +13,11 @@ This prevents exploiting https://www.openwall.com/lists/oss-security/2022/04/08/
1 file changed, 59 insertions(+)
create mode 100644 profiles/apparmor.d/zgrep
diff --git a/profiles/apparmor.d/zgrep b/profiles/apparmor.d/zgrep
new file mode 100644
index 000000000..0bf0765d1
Index: apparmor-3.0.4/profiles/apparmor.d/zgrep
===================================================================
--- /dev/null
+++ b/profiles/apparmor.d/zgrep
@@ -0,0 +1,60 @@
+++ apparmor-3.0.4/profiles/apparmor.d/zgrep
@@ -0,0 +1,62 @@
+# ------------------------------------------------------------------
+#
+# Copyright (C) 2021 Christian Boltz
@ -50,6 +49,7 @@ index 000000000..0bf0765d1
+ /usr/bin/xz Cx -> helper,
+ /usr/bin/xzgrep r,
+ /usr/bin/zgrep Cx -> helper,
+ /usr/bin/zstd Cx -> helper,
+ owner /tmp/zgrep* rw,
+ /usr/bin/zgrep r,
+
@ -66,6 +66,7 @@ index 000000000..0bf0765d1
+ /usr/bin/grep mr,
+ /usr/bin/gzip mr,
+ /usr/bin/xz mr,
+ /usr/bin/zstd mr,
+ /{,**} r,
+
+ }