2. Debian Handbook
3. 14_security
4. Portuguese (Brazil)

<computeroutput># </computeroutput><userinput>semanage login -a -s user_u rhertzog
</userinput><computeroutput># </computeroutput><userinput>semanage login -l
</userinput><computeroutput>
Login Name SELinux User MLS/MCS Range Service

__default__ unconfined_u s0-s0:c0.c1023 *
rhertzog user_u s0 *
root unconfined_u s0-s0:c0.c1023 *
# </computeroutput><userinput>semanage login -d rhertzog
</userinput>

<computeroutput># </computeroutput><userinput>semanage login -a -s user_u rhertzog
</userinput><computeroutput># </computeroutput><userinput>semanage login -l
</userinput>
<computeroutput>
Login Name SELinux User MLS/MCS Range Service

__default__ unconfined_u s0-s0:c0.c1023 *
rhertzog user_u s0 *
root unconfined_u s0-s0:c0.c1023 *
# </computeroutput><userinput>semanage login -d rhertzog
</userinput>

<computeroutput># </computeroutput><userinput>semanage login -a -s user_u rhertzog
</userinput><computeroutput># </computeroutput><userinput>semanage login -l
</userinput><computeroutput>
Login Name SELinux User MLS/MCS Range Service

__default__ unconfined_u s0-s0:c0.c1023 *
rhertzog user_u s0 *
root unconfined_u s0-s0:c0.c1023 *
# </computeroutput><userinput>semanage login -d rhertzog
</userinput>

<computeroutput># </computeroutput><userinput>semanage login -a -s user_u rhertzog
</userinput>
<computeroutput># </computeroutput><userinput>semanage login -l
</userinput>
<computeroutput>
Login Name SELinux User MLS/MCS Range Service

__default__ unconfined_u s0-s0:c0.c1023 *
rhertzog user_u s0 *
root unconfined_u s0-s0:c0.c1023 *
# </computeroutput><userinput>semanage login -d rhertzog
</userinput>

<computeroutput># </computeroutput><userinput>aa-genprof dhclient
</userinput><computeroutput>Writing updated profile for /usr/sbin/dhclient.
Setting /usr/sbin/dhclient to complain mode.

Before you begin, you may wish to check if a
profile already exists for the application you
wish to confine. See the following wiki page for
more information:
https://gitlab.com/apparmor/apparmor/wikis/Profiles

Profiling: /usr/sbin/dhclient

Please start the application to be profiled in
another window and exercise its functionality now.

Once completed, select the "Scan" option below in
order to scan the system logs for AppArmor events.

For each AppArmor event, you will be given the
opportunity to choose whether the access should be
allowed or denied.

[(S)can system log for AppArmor events] / (F)inish
<userinput>S</userinput>
Reading log entries from /var/log/syslog.

Profile: /usr/sbin/dhclient <co id="aa-genprof-execute"></co>
Execute: /usr/sbin/dhclient-script
Severity: unknown

(I)nherit / (C)hild / (P)rofile / (N)amed / (U)nconfined / (X) ix On / (D)eny / Abo(r)t / (F)inish
<userinput>P</userinput>

Should AppArmor sanitise the environment when
switching profiles?

Sanitising environment is more secure,
but some applications depend on the presence
of LD_PRELOAD or LD_LIBRARY_PATH.

[(Y)es] / (N)o
<userinput>Y</userinput>
Writing updated profile for /usr/sbin/dhclient-script.
Complain-mode changes:

Profile: /usr/sbin/dhclient <co id="aa-genprof-capability"></co>
Capability: net_raw
Severity: 8

[1 - capability net_raw,]
(A)llow / [(D)eny] / (I)gnore / Audi(t) / Abo(r)t / (F)inish
<userinput>A</userinput>
Adding capability net_raw, to profile.

Profile: /usr/sbin/dhclient
Capability: net_bind_service
Severity: 8

[1 - #include &lt;abstractions/nis&gt;]
2 - capability net_bind_service,
(A)llow / [(D)eny] / (I)gnore / Audi(t) / Abo(r)t / (F)inish
<userinput>A</userinput>
Adding #include &lt;abstractions/nis&gt; to profile.

Profile: /usr/sbin/dhclient <co id="aa-genprof-read"></co>
Path: /etc/ssl/openssl.cnf
New Mode: owner r
Severity: 2

[1 - #include &lt;abstractions/lightdm&gt;]
2 - #include &lt;abstractions/openssl&gt;
3 - #include &lt;abstractions/ssl_keys&gt;
4 - owner /etc/ssl/openssl.cnf r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r)t / (F)inish
<userinput>2</userinput>

Profile: /usr/sbin/dhclient
Path: /etc/ssl/openssl.cnf
New Mode: owner r
Severity: 2

1 - #include &lt;abstractions/lightdm&gt;
[2 - #include &lt;abstractions/openssl&gt;]
3 - #include &lt;abstractions/ssl_keys&gt;
4 - owner /etc/ssl/openssl.cnf r,
[(A)llow] / (D)eny / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Abo(r)t / (F)inish / (M)ore
<userinput>A</userinput>
[...]
Profile: /usr/sbin/dhclient-script <co id="aa-genprof-other-profile"></co>
Path: /usr/bin/dash
New Mode: owner r
Severity: unknown

1 - #include &lt;abstractions/gvfs-open&gt;
[2 - #include &lt;abstractions/lightdm&gt;]
3 - #include &lt;abstractions/ubuntu-browsers.d/plugins-common&gt;
4 - #include &lt;abstractions/xdg-open&gt;
5 - owner /usr/bin/dash r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r)t / (F)inish
<userinput>A</userinput>
Adding #include &lt;abstractions/lightdm&gt; to profile.
Deleted 2 previous matching profile entries.

= Changed Local Profiles =

The following local profiles were changed. Would you like to save them?

[1 - /usr/sbin/dhclient]
2 - /usr/sbin/dhclient-script
(S)ave Changes / Save Selec(t)ed Profile / [(V)iew Changes] / View Changes b/w (C)lean profiles / Abo(r)t
<userinput>S</userinput>
Writing updated profile for /usr/sbin/dhclient.
Writing updated profile for /usr/sbin/dhclient-script.

Profiling: /usr/sbin/dhclient

Please start the application to be profiled in
another window and exercise its functionality now.

Once completed, select the "Scan" option below in
order to scan the system logs for AppArmor events.

For each AppArmor event, you will be given the
opportunity to choose whether the access should be
allowed or denied.

[(S)can system log for AppArmor events] / (F)inish
<userinput>F</userinput>
Setting /usr/sbin/dhclient to enforce mode.
Setting /usr/sbin/dhclient-script to enforce mode.

Reloaded AppArmor profiles in enforce mode.

Please consider contributing your new profile!
See the following wiki page for more information:
https://gitlab.com/apparmor/apparmor/wikis/Profiles

Finished generating profile for /usr/sbin/dhclient.</computeroutput>

<computeroutput># </computeroutput><userinput>aa-genprof dhclient
</userinput>
<computeroutput>Gravando perfil atualizado para /usr/sbin/dhclient.
Configurando /usr/sbin/dhclient para modo de reclamação.

Antes de começar, você pode querer verificar se um
já existe um perfil para o aplicativo que você
deseja confinar. Veja a seguinte página wiki para
Mais Informações:
https://gitlab.com/apparmor/apparmor/wikis/Profiles

Criação de perfil: /usr/sbin/dhclient

Por favor, inicie o aplicativo para ser perfilado
outra janela e exercite sua funcionalidade agora.

Depois de concluído, selecione a opção "Scan" abaixo em
para verificar os logs do sistema em busca de eventos do AppArmor.

Para cada evento do AppArmor, você receberá o
oportunidade de escolher se o acesso deve ser
permitido ou negado.

[(S)can system log for AppArmor events] / (F)inish
<userinput>S</userinput>
Lendo entradas de log de /var/log/syslog.

Perfil: /usr/sbin/dhclient <co id="aa-genprof-execute"></co>
Execute: /usr/sbin/dhclient-script
Gravidade: desconhecida

(I)herit / (C)hild / (P)rofile / (N)amed / (U)nconfined / (X) ix On / (D)eny / Abo(r)t / (F)inish
<userinput>P</userinput>

O AppArmor deve higienizar o ambiente quando
trocar de perfil?

A higienização do ambiente é mais segura,
mas algumas aplicações dependem da presença
de LD_PRELOAD ou LD_LIBRARY_PATH.

[(S)im] / (N)ão
<userinput>S</userinput>
Escrevendo perfil atualizado para /usr/sbin/dhclient-script.
Mudanças no modo de reclamação:

Perfil: /usr/sbin/dhclient <co id="aa-genprof-capability"></co>
Capacidade: net_raw
Gravidade: 8

[1 - capacidade net_raw,]
(A)llow / [(D)eny] / (I)gnore / Audi(t) / Abo(r)t / (F)finish
<userinput>A</userinput>
Adicionando o recurso net_raw ao perfil.

Perfil: /usr/sbin/dhclient
Capacidade: net_bind_service
Gravidade: 8

1 - #include &lt;abstrações/nis&gt;]
2 - capacidade net_bind_service,
(A)llow / [(D)eny] / (I)gnore / Audi(t) / Abo(r)t / (F)finise
<userinput>A</userinput>
Adicionando #include &lt;abstractions/nis&gt; ao perfil.

Perfil: /usr/sbin/dhclient <co id="aa-genprof-read"></co>
Caminho: /etc/ssl/openssl.cnf
Novo modo: proprietário r
Gravidade: 2

[1 - #include &lt;abstrações/lightdm&gt;]
2 - #include &lt;abstrações/openssl&gt;
3 - #include &lt;abstractions/ssl_keys&gt;
4 - proprietário /etc/ssl/openssl.cnf r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob com (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r) t / (F)concluir
<userinput>2</userinput>

Perfil: /usr/sbin/dhclient
Caminho: /etc/ssl/openssl.cnf
Novo modo: proprietário r
Gravidade: 2

1 - #include &lt;abstrações/lightdm&gt;
[2 - #include &lt;abstrações/openssl&gt;]
3 - #include &lt;abstractions/ssl_keys&gt;
4 - proprietário /etc/ssl/openssl.cnf r,
[(A)llow] / (D)eny / (I)gnore / (G)lob / Glob com (E)xtension / (N)ew / Abo(r)t / (F)inish / (M)ore
<userinput>A</userinput>
[...]
Perfil: /usr/sbin/dhclient-script <co id="aa-genprof-other-profile"></co>
Caminho: /usr/bin/dash
Novo modo: proprietário r
Gravidade: desconhecida

1 - #include &lt;abstrações/gvfs-open&gt;
[2 - #include &lt;abstrações/lightdm&gt;]
3 - #include &lt;abstractions/ubuntu-browsers.d/plugins-common&gt;
4 - #include &lt;abstrações/xdg-open&gt;
5 - proprietário /usr/bin/dash r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob com (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r) t / (F)concluir
<userinput>A</userinput>
Adicionando #include &lt;abstractions/lightdm&gt; ao perfil.
Excluídas 2 entradas de perfil correspondentes anteriores.

= Perfis locais alterados =

Os seguintes perfis locais foram alterados. Você gostaria de salvá-los?

[1 - /usr/sbin/dhclient]
2 - /usr/sbin/dhclient-script
(S)salvar alterações / Salvar perfil selecionado(t)ed / [(V)visualizar alterações] / Visualizar alterações b/w (C)perfis enxutos / Abo(r)t
<userinput>S</userinput>
Escrevendo perfil atualizado para /usr/sbin/dhclient.
Escrevendo perfil atualizado para /usr/sbin/dhclient-script.

Criação de perfil: /usr/sbin/dhclient

Por favor, inicie o aplicativo para ser perfilado
outra janela e exercite sua funcionalidade agora.

Depois de concluído, selecione a opção "Scan" abaixo em
para verificar os logs do sistema em busca de eventos do AppArmor.

Para cada evento do AppArmor, você receberá o
oportunidade de escolher se o acesso deve ser
permitido ou negado.

[(S)can system log for AppArmor events] / (F)inish
<userinput>F</userinput>
Configurando /usr/sbin/dhclient para impor o modo.
Configurando /usr/sbin/dhclient-script para impor o modo.

Perfis do AppArmor recarregados no modo de imposição.

Considere contribuir com seu novo perfil!
Consulte a seguinte página wiki para obter mais informações:
https://gitlab.com/apparmor/apparmor/wikis/Profiles

Concluída a geração do perfil para /usr/sbin/dhclient.</computeroutput>

<![CDATA[## <summary>Myapp example policy</summary>
## <desc>
## <p>
## More descriptive text about myapp. The desc
## tag can also use p, ul, and ol
## html tags for formatting.
## </p>
## <p>
## This policy supports the following myapp features:
## <ul>
## <li>Feature A</li>
## <li>Feature B</li>
## <li>Feature C</li>
## </ul>
## </p>
## </desc>
#

########################################
## <summary>
## Execute a domain transition to run myapp.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to transition.
## </summary>
## </param>
#
interface(`myapp_domtrans',`
gen_require(`
type myapp_t, myapp_exec_t;
')

domtrans_pattern($1,myapp_exec_t,myapp_t)
')

########################################
## <summary>
## Read myapp log files.
## </summary>
## <param name="domain">
## <summary>
## Domain allowed to read the log files.
## </summary>
## </param>
#
interface(`myapp_read_log',`
gen_require(`
type myapp_log_t;
')

logging_search_logs($1)
allow $1 myapp_log_t:file read_file_perms;
')
]]>

## &lt;<![CDATA[## <summary&gt;>Exemplo de política do myapp&lt;</summary&gt;
## &lt;desc&gt;
## &lt;p&gt;>
## <desc>
## <p>
## Mais um texto descritivo sobre myapp. A tag &lt;desc&gt;desc
## também pode usar &lt;p&gt;, &lt;ul&gt;, e &lt;ol&gt;as tags html p, ul, e ol
## tags html para formatação;
## &lt;/p&gt;
## &lt;p&gt;</p>
## <p>
## EstaThis politicacy supporta as seguintes características do myapps the following myapp features:
## &lt;ul&gt;<ul>
## &lt;li&gt;Característica A&lt;/li&gt;
## &lt;li&gt;Característica B&lt;/li&gt;
## &lt;li&gt;Característica C&lt;/li&gt;
## &lt;/ul&gt;
## &lt;/p&gt;
## &lt;<li>Feature A</li>
## <li>Feature B</li>
## <li>Feature C</li>
## </ul>
## </p>
## </desc&gt;>
#

########################################
## &lt;<summario&gt;y>
## Executar uma transição de domínio para executar myapp.
## &lt;</summario&gt;
## &lt;y>
## <param name="domain"&gt;>
## <summary>
## Domínio permitiu a transição.
## &lt; </summary>
## </param&gt;>
#
interface(`myapp_domtrans',`
gen_require(`
type myapp_t, myapp_exec_t;
')

domtrans_pattern($1,myapp_exec_t,myapp_t)
')

########################################
## &lt;<summary&gt;>
## Ler arquivos de log myapp.
## &lt;</summary&gt;
## &lt;>
## <param name="domain"&gt;>
## <summary>
## Domínio permitiu ler os arquivos de log.
## &lt; </summary>
## </param&gt;>
#
interface(`myapp_read_log',`
gen_require(`
type myapp_log_t;
')

logging_search_logs($1)
allow $1 myapp_log_t:file read_file_perms;
')
]]>

<computeroutput># </computeroutput><userinput>aa-genprof dhclient
</userinput><computeroutput>Writing updated profile for /usr/sbin/dhclient.
Setting /usr/sbin/dhclient to complain mode.

Before you begin, you may wish to check if a
profile already exists for the application you
wish to confine. See the following wiki page for
more information:
https://gitlab.com/apparmor/apparmor/wikis/Profiles

Profiling: /usr/sbin/dhclient

Please start the application to be profiled in
another window and exercise its functionality now.

Once completed, select the "Scan" option below in
order to scan the system logs for AppArmor events.

For each AppArmor event, you will be given the
opportunity to choose whether the access should be
allowed or denied.

[(S)can system log for AppArmor events] / (F)inish
<userinput>S</userinput>
Reading log entries from /var/log/syslog.

Profile: /usr/sbin/dhclient <co id="aa-genprof-execute"></co>
Execute: /usr/sbin/dhclient-script
Severity: unknown

(I)nherit / (C)hild / (P)rofile / (N)amed / (U)nconfined / (X) ix On / (D)eny / Abo(r)t / (F)inish
<userinput>P</userinput>

Should AppArmor sanitise the environment when
switching profiles?

Sanitising environment is more secure,
but some applications depend on the presence
of LD_PRELOAD or LD_LIBRARY_PATH.

[(Y)es] / (N)o
<userinput>Y</userinput>
Writing updated profile for /usr/sbin/dhclient-script.
Complain-mode changes:

Profile: /usr/sbin/dhclient <co id="aa-genprof-capability"></co>
Capability: net_raw
Severity: 8

[1 - capability net_raw,]
(A)llow / [(D)eny] / (I)gnore / Audi(t) / Abo(r)t / (F)inish
<userinput>A</userinput>
Adding capability net_raw, to profile.

Profile: /usr/sbin/dhclient
Capability: net_bind_service
Severity: 8

[1 - #include &lt;abstractions/nis&gt;]
2 - capability net_bind_service,
(A)llow / [(D)eny] / (I)gnore / Audi(t) / Abo(r)t / (F)inish
<userinput>A</userinput>
Adding #include &lt;abstractions/nis&gt; to profile.

Profile: /usr/sbin/dhclient <co id="aa-genprof-read"></co>
Path: /etc/ssl/openssl.cnf
New Mode: owner r
Severity: 2

[1 - #include &lt;abstractions/lightdm&gt;]
2 - #include &lt;abstractions/openssl&gt;
3 - #include &lt;abstractions/ssl_keys&gt;
4 - owner /etc/ssl/openssl.cnf r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r)t / (F)inish
<userinput>2</userinput>

Profile: /usr/sbin/dhclient
Path: /etc/ssl/openssl.cnf
New Mode: owner r
Severity: 2

1 - #include &lt;abstractions/lightdm&gt;
[2 - #include &lt;abstractions/openssl&gt;]
3 - #include &lt;abstractions/ssl_keys&gt;
4 - owner /etc/ssl/openssl.cnf r,
[(A)llow] / (D)eny / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Abo(r)t / (F)inish / (M)ore
<userinput>A</userinput>
[...]
Profile: /usr/sbin/dhclient-script <co id="aa-genprof-other-profile"></co>
Path: /usr/bin/dash
New Mode: owner r
Severity: unknown

1 - #include &lt;abstractions/gvfs-open&gt;
[2 - #include &lt;abstractions/lightdm&gt;]
3 - #include &lt;abstractions/ubuntu-browsers.d/plugins-common&gt;
4 - #include &lt;abstractions/xdg-open&gt;
5 - owner /usr/bin/dash r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob with (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r)t / (F)inish
<userinput>A</userinput>
Adding #include &lt;abstractions/lightdm&gt; to profile.
Deleted 2 previous matching profile entries.

= Changed Local Profiles =

The following local profiles were changed. Would you like to save them?

[1 - /usr/sbin/dhclient]
2 - /usr/sbin/dhclient-script
(S)ave Changes / Save Selec(t)ed Profile / [(V)iew Changes] / View Changes b/w (C)lean profiles / Abo(r)t
<userinput>S</userinput>
Writing updated profile for /usr/sbin/dhclient.
Writing updated profile for /usr/sbin/dhclient-script.

Profiling: /usr/sbin/dhclient

Please start the application to be profiled in
another window and exercise its functionality now.

Once completed, select the "Scan" option below in
order to scan the system logs for AppArmor events.

For each AppArmor event, you will be given the
opportunity to choose whether the access should be
allowed or denied.

[(S)can system log for AppArmor events] / (F)inish
<userinput>F</userinput>
Setting /usr/sbin/dhclient to enforce mode.
Setting /usr/sbin/dhclient-script to enforce mode.

Reloaded AppArmor profiles in enforce mode.

Please consider contributing your new profile!
See the following wiki page for more information:
https://gitlab.com/apparmor/apparmor/wikis/Profiles

Finished generating profile for /usr/sbin/dhclient.</computeroutput>

<computeroutput># </computeroutput><userinput>aa-genprof dhclient
</userinput>
<computeroutput>Gravando perfil atualizado para /usr/sbin/dhclient.
Configurando /usr/sbin/dhclient para modo de reclamação.

Antes de começar, você pode querer verificar se um
já existe um perfil para o aplicativo que você
deseja confinar. Veja a seguinte página wiki para
Mais Informações:
https://gitlab.com/apparmor/apparmor/wikis/Profiles

Criação de perfil: /usr/sbin/dhclient

Por favor, inicie o aplicativo para ser perfilado
outra janela e exercite sua funcionalidade agora.

Depois de concluído, selecione a opção "Scan" abaixo em
para verificar os logs do sistema em busca de eventos do AppArmor.

Para cada evento do AppArmor, você receberá o
oportunidade de escolher se o acesso deve ser
permitido ou negado.

[(S)pode log do sican systema para eventos AppArmor] / (F)concluir log for AppArmor events] / (F)inish
<userinput>S</userinput>
Lendo entradas de log de /var/log/syslog.

Perfil: /usr/sbin/dhclient <co id="aa-genprof-execute"></co>
Execute: /usr/sbin/dhclient-script
Gravidade: desconhecida

(I)herit / (C)hild / (P)rofile / (N)amed / (U)nconfined / (X) ix On / (D)eny / Abo(r)t / (F)inish
<userinput>P</userinput>

O AppArmor deve higienizar o ambiente quando
trocar de perfil?

A higienização do ambiente é mais segura,
mas algumas aplicações dependem da presença
de LD_PRELOAD ou LD_LIBRARY_PATH.

[(S)im n] / (N)ão
<userinput>S</userinput>
Escrevendo perfil atualizado para /usr/sbin/dhclient-script.
Mudanças no modo de reclamação:

Perfil: /usr/sbin/dhclient <co id="aa-genprof-capability"></co>
Capacidade: net_raw
Gravidade: 8

[1 - capacidade net_raw,]
(A)llow / [(D)eny] / (I)gnore / Audi(t) / Abo(r)t / (F)finiseh
<userinput>A</userinput>
Adicionando o recurso net_raw ao perfil.

Perfil: /usr/sbin/dhclient
Capacidade: net_bind_service
Gravidade: 8

1 - #include &lt;abstrações/nis&gt;]
2 - capacidade net_bind_service,
(A)llow / [(D)eny] / (I)gnore / Audi(t) / Abo(r)t / (F)finise
<userinput>A</userinput>
Adicionando #include &lt;abstractions/nis&gt; ao perfil.

Perfil: /usr/sbin/dhclient <co id="aa-genprof-read"></co>
Caminho: /etc/ssl/openssl.cnf
Novo modo: proprietário r
Gravidade: 2

[1 - #include &lt;abstrações/lightdm&gt;]
2 - #include &lt;abstrações/openssl&gt;
3 - #include &lt;abstractions/ssl_keys&gt;
4 - proprietário /etc/ssl/openssl.cnf r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob com (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r) t / (F)concluir
<userinput>2</userinput>

Perfil: /usr/sbin/dhclient
Caminho: /etc/ssl/openssl.cnf
Novo modo: proprietário r
Gravidade: 2

1 - #include &lt;abstrações/lightdm&gt;
[2 - #include &lt;abstrações/openssl&gt;]
3 - #include &lt;abstractions/ssl_keys&gt;
4 - proprietário /etc/ssl/openssl.cnf r,
[(A)llow] / (D)eny / (I)gnore / (G)lob / Glob com (E)xtension / (N)ew / Abo(r)t / (F)inish / (M)ore
<userinput>A</userinput>
[...]
Perfil: /usr/sbin/dhclient-script <co id="aa-genprof-other-profile"></co>
Caminho: /usr/bin/dash
Novo modo: proprietário r
Gravidade: desconhecida

1 - #include &lt;abstrações/gvfs-open&gt;
[2 - #include &lt;abstrações/lightdm&gt;]
3 - #include &lt;abstractions/ubuntu-browsers.d/plugins-common&gt;
4 - #include &lt;abstrações/xdg-open&gt;
5 - proprietário /usr/bin/dash r,
(A)llow / [(D)eny] / (I)gnore / (G)lob / Glob com (E)xtension / (N)ew / Audi(t) / (O)wner permissions off / Abo(r) t / (F)concluir
<userinput>A</userinput>
Adicionando #include &lt;abstractions/lightdm&gt; ao perfil.
Excluídas 2 entradas de perfil correspondentes anteriores.

= Perfis locais alterados =

Os seguintes perfis locais foram alterados. Você gostaria de salvá-los?

[1 - /usr/sbin/dhclient]
2 - /usr/sbin/dhclient-script
(S)salvar alterações / Salvar perfil selecionado(t)ed / [(V)visualizar alterações] / Visualizar alterações b/w (C)perfis enxutos / Abo(r)t
<userinput>S</userinput>
Escrevendo perfil atualizado para /usr/sbin/dhclient.
Escrevendo perfil atualizado para /usr/sbin/dhclient-script.

Criação de perfil: /usr/sbin/dhclient

Por favor, inicie o aplicativo para ser perfilado
outra janela e exercite sua funcionalidade agora.

Depois de concluído, selecione a opção "Scan" abaixo em
para verificar os logs do sistema em busca de eventos do AppArmor.

Para cada evento do AppArmor, você receberá o
oportunidade de escolher se o acesso deve ser
permitido ou negado.

[(S)pode log do sican systema para eventos AppArmor] / (F)concluir log for AppArmor events] / (F)inish
<userinput>F</userinput>
Configurando /usr/sbin/dhclient para impor o modo.
Configurando /usr/sbin/dhclient-script para impor o modo.

Perfis do AppArmor recarregados no modo de imposição.

Considere contribuir com seu novo perfil!
Consulte a seguinte página wiki para obter mais informações:
https://gitlab.com/apparmor/apparmor/wikis/Profiles

Concluída a geração do perfil para /usr/sbin/dhclient.</computeroutput>

<primary>forensics</primary>

<primary>regraforense</primary>

<primary>penetration testing</primary>

<primary>detecção de intrusteste de penetração</primary>

<primary><emphasis role="distribution">BlackArchLinux</emphasis></primary>

<primary><emphasis role="pkg">checksecuritydistribution">BlackArchLinux</emphasis></primary>