mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

ZFS updates

Browse source
This commit is contained in:
Jeroen Rijken 2022-07-23 13:22:38 +02:00 committed by Alex
parent b55c3f7d06
commit 3af11c4d16
3 changed files with 16 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-s-z/zed
View file

@ -39,12 +39,13 @@ profile zed @{exec_path} flags=(complain) {
@{run}/zed.state rwkl,
@{run}/zfs-list.cache@* rw,
@{sys}/bus/pci/slots/ r,
@{sys}/bus/pci/slots/[0-9]*/address r,
@{PROC}/@{pids}/mounts r,
owner @{PROC}/@{pids}/fd/ r,
@{PROC}/@{pid}/task/@{tid}/comm rw,
@{sys}/bus/pci/slots/ r,
/dev/zfs rw,
include if exists <local/zed>

9
apparmor.d/profiles-s-z/zfs
View file

@ -11,15 +11,20 @@ profile zfs @{exec_path} flags=(complain) {
include <abstractions/base>
capability sys_admin,
capability dac_read_search,
mount fstype=zfs,
umount fstype=zfs,
@{exec_path} mr,
/etc/zfs/zfs-list.cache/{,*} rwk,
@{PROC}/@{pids}/mounts r,
@{run}/zfs-list.cache@* rw,
@{PROC}/@{pids}/mounts r,
@{PROC}/sys/fs/pipe-max-size r,
/dev/zfs rw,
include if exists <local/zfs>

4
apparmor.d/profiles-s-z/zpool
View file

@ -19,11 +19,15 @@ profile zpool @{exec_path} flags=(complain) {
/{usr/,}{local/,}lib/zfs-linux/zpool.d/* rix,
/etc/hostid r,
/etc/zfs/*.cache rwk,
@{run}/blkid/blkid.tab rw,
@{run}/blkid/blkid.tab.old l,
@{run}/blkid/blkid.tab-* rwl,
@{sys}/bus/pci/slots/
@{sys}/bus/pci/slots/[0-9]*/address
@{PROC}/@{pids}/mounts r,
@{PROC}/sys/kernel/spl/hostid r,