mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 16:03:51 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

crontab: Use editor abstraction

Browse Source
This commit is contained in:
doublez13 2024-05-16 07:36:16 -06:00 committed by Alex
parent 98ea2fa47b
commit 192d227c50
1 changed files with 1 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
apparmor.d/groups/cron/crontab
View File

@ -35,21 +35,10 @@ profile crontab @{exec_path} {
profile editor { profile editor {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict> include <abstractions/app/editor>
capability fsetid, capability fsetid,
@{bin}/sensible-editor mr,
@{bin}/vim.* mrix,
@{sh_path} rix,
@{bin}/which{,.debianutils} rix,
owner @{HOME}/.selected_editor r,
/usr/share/vim/{,**} r,
/etc/vim/{,**} r,
owner @{HOME}/.viminfo{,.tmp} rw,
/tmp/ r, /tmp/ r,
owner @{tmp}/crontab.*/crontab rw, owner @{tmp}/crontab.*/crontab rw,