- Committer: Arne Fitzenreiter
- Date: 2024-04-29 12:45:19 UTC
- Revision ID: git-v1:464b2117ead41a2c5f5771665f828e74e3e40f82
suricata.yaml: Fix Landlock path settings
Suricata will complain if it cannot read its own configuration file,
hence read-only access to /etc/suricata must be allowed. Since the list
applies to directories, rather than files, restricting read access to
only /usr/share/misc/magic.mgc is not possible; reading /usr/share/misc
must be allowed instead.
Fixes: #13645
Tested-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
Suricata will complain if it cannot read its own configuration file,
hence read-only access to /etc/suricata must be allowed. Since the list
applies to directories, rather than files, restricting read access to
only /usr/share/misc/magic.mgc is not possible; reading /usr/share/misc
must be allowed instead.
Fixes: #13645
Tested-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
config
|
2 | 18 years ago | ipfire | git-svn-id: http://svn.ipfire.org/svn/ipfire/IPF |
|
||
|
doc
|
2 | 18 years ago | ipfire | git-svn-id: http://svn.ipfire.org/svn/ipfire/IPF |
|
||
|
html
|
2 | 18 years ago | ipfire | git-svn-id: http://svn.ipfire.org/svn/ipfire/IPF |
|
||
|
langs
|
2 | 18 years ago | ipfire | git-svn-id: http://svn.ipfire.org/svn/ipfire/IPF |
|
||
|
lfs
|
2 | 18 years ago | ipfire | git-svn-id: http://svn.ipfire.org/svn/ipfire/IPF |
|
||
|
src
|
2 | 18 years ago | ipfire | git-svn-id: http://svn.ipfire.org/svn/ipfire/IPF |
|
||
|
tools
|
2 | 18 years ago | ipfire | git-svn-id: http://svn.ipfire.org/svn/ipfire/IPF |
|
||
.gitignore |
9713 | 2 years ago | Arne Fitzenreiter | gitignore: add *.b2 checksum files Signed-off-by: | 159 bytes |
|
|
|
.mailmap |
8754 | 3 years ago | Michael Tremer | .mailmap: Add Adolf Belka Signed-off-by: Michael | 1.6 KB |
|
|
make.sh |
12460 | 9 months ago | Arne Fitzenreiter | icinga: Removal of icinga addon - As discussed in | 50.1 KB |
|
|
|
README.md |
12388.1.25 | 10 months ago | Michael Tremer | README.md: fix minor typo Signed-off-by: Rico Hop | 1 KB |
|
|