Advertisement
Guest User

Tomoyo rule ssh v2

a guest
Oct 31st, 2011
145
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.47 KB | None | 0 0
  1. <kernel> /usr/bin/ssh
  2. use_profile 3
  3. allow_create /dev/null
  4. allow_create /dev/tty
  5. allow_create /home/user/.ssh/\*
  6. allow_execute /bin/dash
  7. allow_read /dev/urandom
  8. allow_read /etc/gai.conf
  9. allow_read /etc/host.conf
  10. allow_read /etc/hosts
  11. allow_read /etc/ld.so.cache
  12. allow_read /etc/nsswitch.conf
  13. allow_read /etc/passwd
  14. allow_read /etc/resolv.conf
  15. allow_read /etc/services
  16. allow_read /etc/ssh/ssh_config
  17. allow_read /etc/ssl/openssl.cnf
  18. allow_read /lib/libc-\*.so
  19. allow_read /lib/libcom_err.so.\*
  20. allow_read /lib/libdl-\*.so
  21. allow_read /lib/libkeyutils.so.\*
  22. allow_read /lib/libnsl-\*.so
  23. allow_read /lib/libnss_compat-\*.so
  24. allow_read /lib/libnss_dns-\*.so
  25. allow_read /lib/libnss_files-\*.so
  26. allow_read /lib/libnss_nis-\*.so
  27. allow_read /lib/libpthread-\*.so
  28. allow_read /lib/libresolv-\*.so
  29. allow_read /tomld/0f86c727e2a4b82dd40446a12db7bdee/change_time/1318246430
  30. allow_read /tomld/0f86c727e2a4b82dd40446a12db7bdee/cpu_time/0
  31. allow_read /tomld/0f86c727e2a4b82dd40446a12db7bdee/create_time/1318246430
  32. allow_read /usr/lib/libcrypto.so.\*
  33. allow_read /usr/lib/libgssapi_krb\*.so.\*
  34. allow_read /usr/lib/libk5crypto.so.\*
  35. allow_read /usr/lib/libkrb5support.so.\*
  36. allow_read /usr/lib/libkrb\*.so.\*
  37. allow_read /usr/lib/libz.so.\*
  38. allow_read/write /dev/null
  39. allow_read/write /dev/tty
  40. allow_read/write /home/user/.ssh/\*
  41. allow_truncate /dev/null
  42. allow_truncate /dev/tty
  43. allow_truncate /home/user/.ssh/\*
  44. allow_unlink /dev/null
  45. allow_unlink /dev/tty
  46. allow_unlink /home/user/.ssh/\*
  47.  
  48. <kernel> /usr/bin/ssh /bin/dash
  49. use_profile 3
  50. allow_create /dev/null
  51. allow_execute /usr/bin/xauth
  52. allow_read /etc/ld.so.cache
  53. allow_read /lib/libc-\*.so
  54. allow_read/write /dev/null
  55. allow_truncate /dev/null
  56. allow_unlink /dev/null
  57.  
  58. <kernel> /usr/bin/ssh /bin/dash /usr/bin/xauth
  59. use_profile 3
  60. allow_create /home/user/.Xauthority-c
  61. allow_create /home/user/.Xauthority-l
  62. allow_link /home/user/.Xauthority-c /home/user/.Xauthority-l
  63. allow_read /etc/ld.so.cache
  64. allow_read /home/user/.Xauthority
  65. allow_read /lib/libc-\*.so
  66. allow_read /lib/libdl-\*.so
  67. allow_read /usr/lib/libX\*.so.\*
  68. allow_read /usr/lib/libXau.so.\*
  69. allow_read /usr/lib/libXdmcp.so.\*
  70. allow_read /usr/lib/libXext.so.\*
  71. allow_read /usr/lib/libXmuu.so.\*
  72. allow_read /usr/lib/libxcb.so.\*
  73. allow_read/write /home/user/.Xauthority-c
  74. allow_read/write /home/user/.Xauthority-l
  75. allow_truncate /home/user/.Xauthority-c
  76. allow_truncate /home/user/.Xauthority-l
  77. allow_unlink /home/user/.Xauthority-c
  78. allow_unlink /home/user/.Xauthority-l
  79.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement