apparmor/home.ssh-mitm.bin.sshd_mitm

# Copyright (C) 2017-2018  Joe Testa <jtesta@positronsecurity.com>
#
# This program is free software: you can redistribute it and/or modify
# it under the terms version 3 of the GNU General Public License as
# published by the Free Software Foundation.


#include <tunables/global>

/home/ssh-mitm/bin/sshd_mitm {
  #include <abstractions/base>
  #include <abstractions/wutmp>

  network inet dgram,
  network inet stream,
  network inet6 dgram,
  network inet6 stream,
  network unix stream,
  network netlink raw,

  /bin/bash r,
  /dev/ptmx rw,
  /dev/pts/* rw,
  /dev/tty rw,
  /etc/gai.conf r,
  /etc/group r,
  /etc/ld.so.cache r,
  /etc/nsswitch.conf r,
  /etc/passwd r,
  /proc/*/fd/ r,
  /proc/*/oom_score_adj rw,

  /home/ssh-mitm/bin/sshd_mitm mr,
  /home/ssh-mitm/bin/sshd_mitm ix,
  /home/ssh-mitm/bin/ssh px,

  /home/ssh-mitm/empty/ r,
  /home/ssh-mitm/etc/* r,

  /home/ssh-mitm/sshd.pid w,

  /home/ssh-mitm/tmp/* rw,

  /home/ssh-mitm/shell_session_*.txt w,
  /home/ssh-mitm/sftp_session_*.html w,
  /home/ssh-mitm/sftp_session_*/ w,
  /home/ssh-mitm/sftp_session_*/* w,
}