过来Skype for Linux的用户利用检测程序动作的AppArmor软件发现,软件在读取Mozilla FireFox的一系列文件,包括密码、配置、扩展、插件以及在/etc中绝大多数的文件,这一问题从1.4.0.94--1.4.0.99版本中都存在,让人疑惑的是Skype要这些内容干什么?再没弄清楚之前,这位用户还是将Skype用规则关进了小黑屋.
查看:Skype 1.4.0.99 reads /etc/ passwd and firefox profile!
更多记录:
...
Aug 25 01:34:02 desknote kernel: [ 9116.625673] audit(1188002042.632:13467): REJECTING r access to /etc/ passwd (skype(8470) profile /usr/bin/skype active /usr/bin/skype)
...
# vim:syntax=apparmor
# Last Modified: Sat Aug 25 00:37:50 2007
#include <tunables/global>
/usr/bin/skype {
#include <abstractions/base>
/dev/snd/controlC0 rw,
/dev/snd/pcmC0D0c rw,
/dev/snd/pcmC0D0p rw,
/dev/snd/pcmC0D1c rw,
/dev/snd/timer r,
/home/*/.Skype rw,
/home/*/.Skype/** rw,
/home/*/.config/Trolltech.conf r,
/home/*/.fontconfig/* r,
/home/*/.fonts/* r,
/home/*/.Xauthority r,
/home/*/.kde/share/config/kioslaverc r,
/home/*/.ICEauthority r,
/home/*/.mozilla r,
/home/*/.mozilla/plugins r,
/home/*/.mozilla/firefox r,
/usr/bin/skype mr,
/usr/share/alsa/** r,
/usr/share/fonts/** r,
/usr/share/icons/** r,
/usr/share/locale-langpack/** r,
/usr/share/skype/** r,
/usr/share/X11/XKeysymDB r,
/var/cache/fontconfig/* r,
/var/lib/defoma/fontconfig.d/fonts.conf r,
/tmp/** rw,
/etc/fonts/** r,
/etc/resolv.conf r,
/etc/hosts r,
/etc/nsswitch.conf r,
/etc/gai.conf r,
/etc/ passwd r,
/etc/group r,
/proc/1/cmdline r,
/proc/interrupts r,
}
