Linux ubuntu 6.8.0-90-generic #91-Ubuntu SMP PREEMPT_DYNAMIC Tue Nov 18 14:14:30 UTC 2025 x86_64
nginx/1.24.0
: 67.217.245.49 | : 216.73.216.153
Cant Read [ /etc/named.conf ]
8.3.6
www-data
Bypass.pw
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
Backdoor Scanner
Backdoor Create
Alfa Webshell
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
etc /
apparmor.d /
[ HOME SHELL ]
Name
Size
Permission
Action
abi
[ DIR ]
drwxr-xr-x
abstractions
[ DIR ]
drwxr-xr-x
disable
[ DIR ]
drwxr-xr-x
force-complain
[ DIR ]
drwxr-xr-x
local
[ DIR ]
drwxr-xr-x
rsyslog.d
[ DIR ]
drwxr-xr-x
tunables
[ DIR ]
drwxr-xr-x
1password
354
B
-rw-r--r--
Discord
352
B
-rw-r--r--
MongoDB_Compass
386
B
-rw-r--r--
QtWebEngineProcess
404
B
-rw-r--r--
balena-etcher
374
B
-rw-r--r--
brave
348
B
-rw-r--r--
buildah
342
B
-rw-r--r--
busybox
342
B
-rw-r--r--
cam
330
B
-rw-r--r--
ch-checkns
351
B
-rw-r--r--
ch-run
339
B
-rw-r--r--
chrome
349
B
-rw-r--r--
code
349
B
-rw-r--r--
crun
333
B
-rw-r--r--
devhelp
342
B
-rw-r--r--
element-desktop
368
B
-rw-r--r--
epiphany
356
B
-rw-r--r--
evolution
348
B
-rw-r--r--
firefox
410
B
-rw-r--r--
flatpak
342
B
-rw-r--r--
foliate
342
B
-rw-r--r--
geary
336
B
-rw-r--r--
github-desktop
378
B
-rw-r--r--
goldendict
353
B
-rw-r--r--
ipa_verify
351
B
-rw-r--r--
kchmviewer
353
B
-rw-r--r--
keybase
346
B
-rw-r--r--
lc-compliance
360
B
-rw-r--r--
libcamerify
354
B
-rw-r--r--
linux-sandbox
383
B
-rw-r--r--
loupe
336
B
-rw-r--r--
lsb_release
1.35
KB
-rw-r--r--
lxc-attach
351
B
-rw-r--r--
lxc-create
351
B
-rw-r--r--
lxc-destroy
354
B
-rw-r--r--
lxc-execute
354
B
-rw-r--r--
lxc-stop
345
B
-rw-r--r--
lxc-unshare
354
B
-rw-r--r--
lxc-usernsexec
363
B
-rw-r--r--
mmdebstrap
351
B
-rw-r--r--
msedge
352
B
-rw-r--r--
nautilus
346
B
-rw-r--r--
notepadqq
402
B
-rw-r--r--
nvidia_modprobe
1.18
KB
-rw-r--r--
obsidian
350
B
-rw-r--r--
opam
333
B
-rw-r--r--
opera
355
B
-rw-r--r--
pageedit
347
B
-rw-r--r--
plasmashell
680
B
-rw-r--r--
podman
339
B
-rw-r--r--
polypane
350
B
-rw-r--r--
privacybrowser
365
B
-rw-r--r--
qcam
333
B
-rw-r--r--
qmapshack
348
B
-rw-r--r--
qutebrowser
354
B
-rw-r--r--
rootlesskit
354
B
-rw-r--r--
rpm
330
B
-rw-r--r--
rssguard
347
B
-rw-r--r--
runc
334
B
-rw-r--r--
sbuild
339
B
-rw-r--r--
sbuild-abort
357
B
-rw-r--r--
sbuild-adduser
364
B
-rw-r--r--
sbuild-apt
351
B
-rw-r--r--
sbuild-checkpackages
381
B
-rw-r--r--
sbuild-clean
357
B
-rw-r--r--
sbuild-createchroot
378
B
-rw-r--r--
sbuild-destroychroot
382
B
-rw-r--r--
sbuild-distupgrade
375
B
-rw-r--r--
sbuild-hold
354
B
-rw-r--r--
sbuild-shell
365
B
-rw-r--r--
sbuild-unhold
360
B
-rw-r--r--
sbuild-update
360
B
-rw-r--r--
sbuild-upgrade
363
B
-rw-r--r--
scide
355
B
-rw-r--r--
signal-desktop
366
B
-rw-r--r--
slack
342
B
-rw-r--r--
slirp4netns
354
B
-rw-r--r--
steam
363
B
-rw-r--r--
stress-ng
348
B
-rw-r--r--
surfshark
354
B
-rw-r--r--
systemd-coredump
377
B
-rw-r--r--
thunderbird
354
B
-rw-r--r--
toybox
335
B
-rw-r--r--
transmission
2.34
KB
-rw-r--r--
trinity
342
B
-rw-r--r--
tup
330
B
-rw-r--r--
tuxedo-control-center
400
B
-rw-r--r--
ubuntu_pro_apt_news
1.8
KB
-rw-r--r--
ubuntu_pro_esm_cache
6.76
KB
-rw-r--r--
unix-chkpwd
881
B
-rw-r--r--
unprivileged_userns
699
B
-rw-r--r--
userbindmount
360
B
-rw-r--r--
usr.bin.freshclam
1.11
KB
-rw-r--r--
usr.bin.man
3.37
KB
-rw-r--r--
usr.bin.tcpdump
1.65
KB
-rw-r--r--
usr.lib.snapd.snap-confine.rea...
31.13
KB
-rw-r--r--
usr.sbin.mariadbd
730
B
-rw-r--r--
usr.sbin.rsyslogd
1.69
KB
-rw-r--r--
uwsgi-core
351
B
-rw-r--r--
vdens
336
B
-rw-r--r--
virtiofsd
352
B
-rw-r--r--
vivaldi-bin
358
B
-rw-r--r--
vpnns
336
B
-rw-r--r--
wike
333
B
-rw-r--r--
wpcom
346
B
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : usr.bin.man
# vim:syntax=apparmor #include <tunables/global> /usr/bin/man { #include <abstractions/base> # Use a special profile when man calls anything groff-related. We only # include the programs that actually parse input data in a non-trivial # way, not wrappers such as groff and nroff, since the latter would need a # broader profile. /usr/bin/eqn rmCx -> &man_groff, /usr/bin/grap rmCx -> &man_groff, /usr/bin/pic rmCx -> &man_groff, /usr/bin/preconv rmCx -> &man_groff, /usr/bin/refer rmCx -> &man_groff, /usr/bin/tbl rmCx -> &man_groff, /usr/bin/troff rmCx -> &man_groff, /usr/bin/vgrind rmCx -> &man_groff, # Similarly, use a special profile when man calls decompressors and other # simple filters. /{,usr/}bin/bzip2 rmCx -> &man_filter, /{,usr/}bin/gzip rmCx -> &man_filter, /usr/bin/col rmCx -> &man_filter, /usr/bin/compress rmCx -> &man_filter, /usr/bin/iconv rmCx -> &man_filter, /usr/bin/lzip.lzip rmCx -> &man_filter, /usr/bin/tr rmCx -> &man_filter, /usr/bin/xz rmCx -> &man_filter, # Allow basically anything in terms of file system access, subject to DAC. # The purpose of this profile isn't to confine man itself (that might be # nice in the future, but is tricky since it's quite configurable), but to # confine the processes it calls that parse untrusted data. /** mrixwlk, unix, capability setuid, capability setgid, # Ordinary permission checks sometimes involve checking whether the # process has this capability, which can produce audit log messages. # Silence them. deny capability dac_override, deny capability dac_read_search, signal peer=@{profile_name}, signal peer=/usr/bin/man//&man_groff, signal peer=/usr/bin/man//&man_filter, # Site-specific additions and overrides. See local/README for details. #include <local/usr.bin.man> } profile man_groff { #include <abstractions/base> # Recent kernels revalidate open FDs, and there are often some still # open on TTYs. This is temporary until man learns to close irrelevant # open FDs before execve. #include <abstractions/consoles> # man always runs its groff pipeline with the input file open on stdin, # so we can skip <abstractions/user-manpages>. /usr/bin/eqn rm, /usr/bin/grap rm, /usr/bin/pic rm, /usr/bin/preconv rm, /usr/bin/refer rm, /usr/bin/tbl rm, /usr/bin/troff rm, /usr/bin/vgrind rm, /etc/groff/** r, /etc/papersize r, /usr/lib/groff/site-tmac/** r, /usr/share/groff/** r, /tmp/groff* rw, signal peer=/usr/bin/man, # @{profile_name} doesn't seem to work here. signal peer=/usr/bin/man//&man_groff, } profile man_filter { #include <abstractions/base> # Recent kernels revalidate open FDs, and there are often some still # open on TTYs. This is temporary until man learns to close irrelevant # open FDs before execve. #include <abstractions/consoles> /{,usr/}bin/bzip2 rm, /{,usr/}bin/gzip rm, /usr/bin/col rm, /usr/bin/compress rm, /usr/bin/iconv rm, /usr/bin/lzip.lzip rm, /usr/bin/tr rm, /usr/bin/xz rm, # Manual pages can be more or less anywhere, especially with "man -l", and # there's no harm in allowing wide read access here since the worst it can # do is feed data to the invoking man process. /** r, # Allow writing cat pages. /var/cache/man/** w, signal peer=/usr/bin/man, # @{profile_name} doesn't seem to work here. signal peer=/usr/bin/man//&man_filter, }
Close
