evilsocket / evilsocket/opensnitch

[Bug Report] Auto-generated regexps for appimage /tmp paths duplicate the a-z character class

Open
#1,587 0 comments 1 reaction 0 assignees View on GitHub
bug
Dominant language
Python
Stars
14.1k
Forks
665
PR merge metrics
No merged PRs in 30d

Description

### To Reproduce:

1. Download an AppImage, e.g. [Handy](https://github.com/cjpais/handy)
2. Launch it so it makes a request
3. Allow the request
4. Check the "From this executable" path that was created

^/tmp/\.mount_handy_[0-9a-za-z]+\/.*handy$

5. Check the *name* of the rule - it will have the same duplication.

### Expected behavior (optional):

The regexp should presumably include `[0-9a-zA-Z]`, but OpenSnitch may pass the operand lowercase (even for paths, which may not be correct on case-sensitive filesystems, but that'd be a separate issue)

### Screenshots:

Image

### See also

https://github.com/evilsocket/opensnitch/issues/1392#issuecomment-3090996081

This was so easy to miss that I ended up with tens of rules containing `a-za-z`:

Image

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.