This patch set fixes a regression in the utils/aa-unconfined utility introduced in trunk commit 3592 (and backported to apparmor 2.10 and 2.9) that was intended to add support for processes that listen on ipv6 sockets. The arguments passed to netstat are not supported by the version of netstat provided in OpenSUSE.
It does this both by addressing the invocation of netstat as well as parsing ss(8) output and using this by default. The third patch in the series is offered optionally, as it makes aa-unconfined support using alternate binaries for netstat/ss, which may be problematic in restricted sudo environments. Proposed for trunk, 2.10, and 2.9. -- Steve Beattie <sbeat...@ubuntu.com> http://NxNW.org/~steve/ -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor