evilsocket / evilsocket/opensnitch
[Bug Report] Auto-generated regexps for appimage /tmp paths duplicate the a-z character class
- Dominant language
- Python
- Stars
- 14.1k
- Forks
- 665
- PR merge metrics
- No merged PRs in 30d
Description
### To Reproduce:
1. Download an AppImage, e.g. [Handy](https://github.com/cjpais/handy)
2. Launch it so it makes a request
3. Allow the request
4. Check the "From this executable" path that was created
^/tmp/\.mount_handy_[0-9a-za-z]+\/.*handy$
5. Check the *name* of the rule - it will have the same duplication.
### Expected behavior (optional):
The regexp should presumably include `[0-9a-zA-Z]`, but OpenSnitch may pass the operand lowercase (even for paths, which may not be correct on case-sensitive filesystems, but that'd be a separate issue)
### Screenshots:
### See also
https://github.com/evilsocket/opensnitch/issues/1392#issuecomment-3090996081
This was so easy to miss that I ended up with tens of rules containing `a-za-z`:
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.