search

krathalan / apparmor-profiles

Krathalan's AppArmor profiles for Arch Linux
GNU General Public License v3.0
38 stars 8 forks source link

Allow ssh to execute itself #12

Closed sandwm closed 11 months ago

sandwm commented 1 year ago

This is used for ssh -J (ProxyJump).

Previously, ssh -J user@jumphost user@192.168.1.196 gave an error message by ssh and:

apparmor="DENIED" operation="exec" class="file" profile="ssh" name="/usr/bin/ssh" pid=209228 comm="bash" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
krathalan commented 11 months ago

Thanks! Sorry this took so long to merge.

sandwm commented 11 months ago

Thanks for merging!

Sorry this took so long to merge.

Not an issue. Wasn't hard to "maintain" locally. ;)