diff --git a/apparmor.d/groups/pacman/pacman-hook-mkinitcpio-install b/apparmor.d/groups/pacman/pacman-hook-mkinitcpio similarity index 60% rename from apparmor.d/groups/pacman/pacman-hook-mkinitcpio-install rename to apparmor.d/groups/pacman/pacman-hook-mkinitcpio index f18699b9..28e83113 100644 --- a/apparmor.d/groups/pacman/pacman-hook-mkinitcpio-install +++ b/apparmor.d/groups/pacman/pacman-hook-mkinitcpio @@ -6,22 +6,24 @@ abi , include -@{exec_path} = /usr/share/libalpm/scripts/mkinitcpio-install -profile pacman-hook-mkinitcpio-install @{exec_path} flags=(attach_disconnected) { +@{exec_path} = /usr/share/libalpm/scripts/mkinitcpio +profile pacman-hook-mkinitcpio @{exec_path} flags=(attach_disconnected) { include capability dac_read_search, capability mknod, - unix (receive) type=stream, + # unix (receive) type=stream, @{exec_path} mr, /{usr/,}bin/bash rix, + /{usr/,}bin/cmp rix, /{usr/,}bin/compgen rix, /{usr/,}bin/install rix, /{usr/,}bin/mkinitcpio rPx, /{usr/,}bin/mv rix, + /{usr/,}bin/rm rix, /{usr/,}bin/sed rix, /usr/share/mkinitcpio/*.preset r, @@ -30,14 +32,16 @@ profile pacman-hook-mkinitcpio-install @{exec_path} flags=(attach_disconnected) /etc/mkinitcpio.d/*.preset rw, / r, - owner /boot/vmlinuz-* rw, + /boot/vmlinuz-* rw, + /boot/initramfs-*.img rw, + /boot/initramfs-*-fallback.img rw, - /dev/tty rw, + # /dev/tty rw, - # Inherit Silencer + # # Inherit Silencer deny network inet6 stream, deny network inet stream, - deny /apparmor/.null rw, + # deny /apparmor/.null rw, - include if exists + include if exists } \ No newline at end of file diff --git a/dists/flags/arch.flags b/dists/flags/arch.flags index 9dd9c6c1..61e7eb95 100644 --- a/dists/flags/arch.flags +++ b/dists/flags/arch.flags @@ -8,8 +8,7 @@ pacman-hook-dkms complain pacman-hook-fontconfig complain pacman-hook-gio complain pacman-hook-gtk complain -pacman-hook-mkinitcpio-install attach_disconnected,complain -pacman-hook-mkinitcpio-remove complain +pacman-hook-mkinitcpio attach_disconnected,complain pacman-hook-perl complain pacman-hook-systemd complain pacman-key complain