mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): general update.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-07-02 22:08:15 +01:00
parent c0a081b827
commit 1675a26fbf
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
3 changed files with 44 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apparmor.d/abstractions/authentication.d/complete
View File

@ -8,8 +8,8 @@
@{bin}/unix_chkpwd rPx,
#aa:only whonix
@{lib}/security-misc/pam_faillock_not_if_x rPx,
@{lib}/security-misc/pam-abort-on-locked-password rPx,
@{lib}/security-misc/pam-info rPx,
@{lib}/security-misc/pam-abort-on-locked-password rPx,
@{lib}/security-misc/pam-info rPx,
@{lib}/security-misc/pam_faillock_not_if_x rPx,
# vim:syntax=apparmor

76
apparmor.d/groups/systemd/systemd-udevd
View File

@ -10,9 +10,9 @@ include <tunables/global>
@{exec_path} = @{bin}/udevadm @{lib}/systemd/systemd-udevd
profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/base>
include <abstractions/common/systemd>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/common/systemd>
capability chown,
capability dac_override,
@ -27,7 +27,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
capability sys_rawio,
capability sys_resource,
ptrace (read),
ptrace read,
network inet dgram,
network inet6 dgram,
@ -35,54 +35,52 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
@{exec_path} mrix,
@{sh_path} rix,
@{coreutils_path} rix,
@{bin}/*-print-pci-ids rix,
@{sh_path} rix,
@{coreutils_path} rix,
@{bin}/*-print-pci-ids rix,
@{bin}/alsactl rPUx,
@{bin}/ddcutil rPx,
@{bin}/ddcutil rPx,
@{bin}/dmsetup rPUx,
@{bin}/ethtool rix,
@{bin}/issue-generator rPx,
@{bin}/kmod rPx,
@{bin}/less rPx -> child-pager,
@{bin}/logger rix,
@{bin}/ls rix,
@{bin}/lvm rPx,
@{bin}/mknod rix,
@{bin}/more rPx -> child-pager,
@{bin}/multipath rPx,
@{bin}/nfsrahead rix,
@{bin}/pager rPx -> child-pager,
@{bin}/perl rix,
@{bin}/setfacl rix,
@{bin}/sg_inq rix,
@{bin}/ethtool rix,
@{bin}/issue-generator rPx,
@{bin}/kmod rPx,
@{bin}/less rPx -> child-pager,
@{bin}/logger rix,
@{bin}/ls rix,
@{bin}/lvm rPx,
@{bin}/mknod rix,
@{bin}/more rPx -> child-pager,
@{bin}/multipath rPx,
@{bin}/nfsrahead rix,
@{bin}/pager rPx -> child-pager,
@{bin}/perl rix,
@{bin}/setfacl rix,
@{bin}/sg_inq rix,
@{bin}/snap rPUx,
@{bin}/systemctl rCx -> systemctl,
@{bin}/systemd-run rix,
@{bin}/unshare rix,
@{bin}/systemctl rCx -> systemctl,
@{bin}/systemd-run rix,
@{bin}/unshare rix,
@{lib}/crda/* rPUx,
@{lib}/gdm-runtime-config rPx,
@{lib}/nfsrahead rPUx,
@{lib}/open-iscsi/net-interface-handler rPUx,
@{lib}/pm-utils/power.d/* rPUx,
@{lib}/snapd/snap-device-helper rPx,
@{lib}/systemd/systemd-* rPx,
@{lib}/udev/* rPUx,
/usr/share/hplip/config_usb_printer.py rPUx,
@{lib}/crda/* rPUx,
@{lib}/gdm-runtime-config rPx,
@{lib}/nfsrahead rPUx,
@{lib}/open-iscsi/net-interface-handler rPUx,
@{lib}/pm-utils/power.d/* rPUx,
@{lib}/snapd/snap-device-helper rPx,
@{lib}/systemd/systemd-* rPx,
@{lib}/udev/* rPUx,
/usr/share/hplip/config_usb_printer.py rPUx,
/etc/console-setup/*.sh rPUx,
/etc/network/cloud-ifupdown-helper rPUx,
/etc/machine-id r,
/etc/console-setup/*.sh rPUx,
/etc/network/cloud-ifupdown-helper rPUx,
/etc/default/* r,
/etc/machine-id r,
/etc/nfs.conf rk,
/etc/udev/{,**} r,
/etc/udev/hwdb.bin rw,
/etc/udev/.#hwdb.bin* rw,
/etc/udev/hwdb.bin rw,
/etc/modprobe.d/ r,
/etc/modprobe.d/*.conf r,

6
apparmor.d/profiles-g-l/libreoffice
View File

@ -39,7 +39,7 @@ profile libreoffice @{exec_path} {
@{bin}/sed rix,
@{bin}/uname rix,
@{open_path} rpx -> child-open-browsers,
@{open_path} rPx -> child-open-browsers,
@{bin}/gpgconf rPx,
@{bin}/gpgsm rPx,
@ -51,8 +51,10 @@ profile libreoffice @{exec_path} {
@{lib}/jvm/java*/bin/java rix,
@{lib}/jvm/java*/lib/** rm,
@{lib}/libreoffice/share/uno_packages/cache/stamp.sys w,
@{lib}/libreoffice/{,**} rm,
@{lib}/libreoffice/share/uno_packages/cache/stamp.sys w,
@{lib}/libreoffice/program/{,**/}__pycache__/ w,
@{lib}/libreoffice/share/extensions/{,**/}__pycache__/ w,
/usr/share/hyphen/{,**} r,
/usr/share/libexttextcat/{,**} r,