+++ Jan Engelhardt [10/08/07 20:23 +0200]:
Hi,
so by default, the yast control panel apparmoar/"Profile Mode Configuration" shows:
bin.ping enforce sbin.klogd enforce etc.
With bin.ping being enabled, one cannot use the ping utility anymore, neither as normal user nor as root. According to strace,
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = -1 EACCES (Permission denied)
already fails. Is this really intended?
Jan -- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
This is incomplete policy for ping - you can correct by running aa-logprof from the command line. Thanks for the report. Will update the policy for the next release. -dom -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org