Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

AppArmor: Explicitly allow netlink raw socket for Supervisor #370

Merged
merged 1 commit into from
Apr 10, 2024
Merged

AppArmor: Explicitly allow netlink raw socket for Supervisor #370

merged 1 commit into from
Apr 10, 2024

Commits on Apr 9, 2024

  1. AppArmor: Explicitly allow netlink raw socket for Supervisor 

    The Supervisor uses netlink raw sockets to get access to udev events
sent through netlink. Technically, the rules so far have denied all raw
sockets. However, in practice it seems that netlink raw sockets have
still been working.

For unknown reasons, in Debian Bookworm that behavior changed: The rule
now also denies netlink raw sockets.

This new ruleset starts off with the default setting (where almost
everything seems to be denied), and enables explicitly what is needed
in Supervisor. In tests this ruleset worked on Home Assistant OS as well
as Debian Bookworm.

Fixes: home-assistant/supervisor#4381
    @agners
    agners committed Apr 9, 2024
    Configuration menu
    Copy the full SHA
    b885700 View commit details
    Browse the repository at this point in the history