apparmor.d/apparmor.d/systemd-fsck

37 lines
895 B
Text
Raw Normal View History

# vim:syntax=apparmor
# ------------------------------------------------------------------
#
# Copyright (C) 2020 Mikhail Morfikov
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
2020-12-10 22:33:39 +01:00
abi <abi/3.0>,
2020-12-10 22:33:39 +01:00
include <tunables/global>
@{exec_path} = /{usr/,}lib/systemd/systemd-fsck
2020-12-24 13:55:12 +01:00
profile systemd-fsck @{exec_path} {
2020-12-10 22:33:39 +01:00
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/disks-read>
include <abstractions/systemd-common>
capability sys_resource,
2020-12-24 13:55:12 +01:00
# Needed?
deny capability net_admin,
@{exec_path} mr,
/{usr/,}sbin/fsck rPx,
/{usr/,}sbin/e2fsck rPx,
2020-10-25 10:23:34 +01:00
owner @{run}/systemd/quotacheck w,
2020-12-10 22:33:39 +01:00
include if exists <local/systemd-fsck>
}