diff --git a/apparmor.d/profiles-m-r/resolvconf b/apparmor.d/profiles-m-r/resolvconf new file mode 100644 index 00000000..1c37a957 --- /dev/null +++ b/apparmor.d/profiles-m-r/resolvconf @@ -0,0 +1,29 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}sbin/resolvconf +profile resolvconf @{exec_path} { + include + + @{exec_path} mr, + + /{usr/,}bin/{,ba,da}sh rix, + /{usr/,}bin/cat rix, + /{usr/,}bin/flock rix, + /{usr/,}bin/mv rix, + /{usr/,}bin/rm rix, + /{usr/,}bin/run-parts rix, + /{usr/,}bin/sed rix, + + /etc/resolvconf/update.d/libc mr, + + owner @{run}/resolvconf/{,**} rw, + owner @{run}/resolvconf/run-lock wk, + + include if exists +} \ No newline at end of file