Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conflict with ssh connection sharing #581

Open
m00nwtchr opened this issue Oct 24, 2024 · 0 comments
Open

Conflict with ssh connection sharing #581

m00nwtchr opened this issue Oct 24, 2024 · 0 comments

Comments

@m00nwtchr
Copy link

m00nwtchr commented Oct 24, 2024

e.g. with this .ssh/config

ControlMaster auto
ControlPath ${XDG_RUNTIME_DIR}/ssh/socket-%C

aa-log:

apparmor="ALLOWED" operation="mknod" class="file" profile="ssh" name="/run/user/1000/ssh/socket-e0896e67e27e5a03a7874c8b07b0adb136169dd7.npJtXR12WaEDRI0R"  comm="ssh" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000 FSUID="m00n" OUID="m00n"
apparmor="ALLOWED" operation="link" class="file" profile="ssh" name="/run/user/1000/ssh/socket-e0896e67e27e5a03a7874c8b07b0adb136169dd7"  comm="ssh" requested_mask="l" denied_mask="l" fsuid=1000 ouid=1000 target="/run/user/1000/ssh/socket-e0896e67e27e5a03a7874c8b07b0adb136169dd7.npJtXR12WaEDRI0R" FSUID="m00n" OUID="m00n"
apparmor="ALLOWED" operation="unlink" class="file" profile="ssh" name="/run/user/1000/ssh/socket-e0896e67e27e5a03a7874c8b07b0adb136169dd7.npJtXR12WaEDRI0R"  comm="ssh" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000 FSUID="m00n" OUID="m00n"
apparmor="ALLOWED" operation="unlink" class="file" profile="ssh" name="/run/user/1000/ssh/socket-e0896e67e27e5a03a7874c8b07b0adb136169dd7"  comm="ssh" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000 FSUID="m00n" OUID="m00n"

(Maybe not possible to support directly in apparmor.d, but leaving this issue as documentation of what to add to your local customizations)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant