feat(profiles): add software-properties-gtk & ubuntu-advantage.

This commit is contained in:
Alexandre Pujol 2022-07-03 20:29:45 +01:00
parent d04bb8f5b2
commit 4a37cd1149
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
3 changed files with 65 additions and 0 deletions

View File

@ -0,0 +1,36 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/software-properties-gtk
profile software-properties-gtk @{exec_path} {
include <abstractions/base>
include <abstractions/apt-common>
include <abstractions/python>
include <abstractions/fonts>
include <abstractions/openssl>
@{exec_path} mr,
/{usr/,}bin/aplay rPx,
/{usr/,}bin/apt-key rPx,
/{usr/,}bin/dpkg rPx -> child-dpkg,
/{usr/,}bin/lsb_release rPx -> lsb_release,
/{usr/,}bin/ubuntu-advantage rPx,
/usr/share/icons/{,**} r,
/usr/share/ubuntu-drivers-common/detect/{,**} r,
/etc/machine-id r,
owner @{PROC}/@{pid}/fd/ r,
@{sys}/devices/ r,
@{sys}/devices/**/ r,
include if exists <local/software-properties-gtk>
}

View File

@ -0,0 +1,24 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/ubuntu-advantage
profile ubuntu-advantage @{exec_path} {
include <abstractions/base>
include <abstractions/apt-common>
include <abstractions/nameservice-strict>
include <abstractions/python>
include <abstractions/ssl_certs>
@{exec_path} mr,
/{usr/,}bin/dpkg rPx -> child-dpkg,
owner @{PROC}/@{pid}/fd/ r,
include if exists <local/ubuntu-advantage>
}

View File

@ -3,12 +3,17 @@ apport-gtk complain
apt-esm-hook complain apt-esm-hook complain
apt-esm-json-hook complain apt-esm-json-hook complain
check-new-release-gtk complain check-new-release-gtk complain
do-release-upgrade complain
hwe-support-status complain hwe-support-status complain
list-oem-metapackages complain list-oem-metapackages complain
livepatch-notification complain livepatch-notification complain
notify-reboot-required complain
package-system-locked attach_disconnected,complain package-system-locked attach_disconnected,complain
packagekitd complain packagekitd complain
release-upgrade-motd complain release-upgrade-motd complain
software-properties-gtk
software-properties-gtk complain
ubuntu-advantage complain
ubuntu-advantage-notification complain ubuntu-advantage-notification complain
ubuntu-report complain ubuntu-report complain
update-manager attach_disconnected,complain update-manager attach_disconnected,complain