mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
feat(profiles): remove setpriv.
This program should be included by other profile, not generally confined.
This commit is contained in:
parent
fbd5996531
commit
4d317cf807
@ -1,20 +0,0 @@
|
|||||||
# apparmor.d - Full set of apparmor profiles
|
|
||||||
# Copyright (C) 2020-2021 Mikhail Morfikov
|
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
|
||||||
|
|
||||||
abi <abi/3.0>,
|
|
||||||
|
|
||||||
include <tunables/global>
|
|
||||||
|
|
||||||
@{exec_path} = /{usr/,}bin/setpriv
|
|
||||||
profile setpriv @{exec_path} {
|
|
||||||
include <abstractions/base>
|
|
||||||
include <abstractions/nameservice-strict>
|
|
||||||
|
|
||||||
@{exec_path} mr,
|
|
||||||
|
|
||||||
/{usr/,}bin/[a-z0-9]* rPUx,
|
|
||||||
/{usr/,}{s,}bin/[a-z0-9]* rPUx,
|
|
||||||
|
|
||||||
include if exists <local/setpriv>
|
|
||||||
}
|
|
@ -173,7 +173,6 @@ s3fs complain
|
|||||||
sbctl complain
|
sbctl complain
|
||||||
scrcpy complain
|
scrcpy complain
|
||||||
sdcv complain
|
sdcv complain
|
||||||
setpriv complain
|
|
||||||
sftp-server complain
|
sftp-server complain
|
||||||
slirp4netns attach_disconnected,complain
|
slirp4netns attach_disconnected,complain
|
||||||
snap complain
|
snap complain
|
||||||
|
Loading…
Reference in New Issue
Block a user