mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): add only directive.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-03-21 23:18:03 +00:00
parent 6052b95347
commit 5149b55bd0
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
3 changed files with 16 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
apparmor.d/groups/gpg/gpg
View File

@ -39,7 +39,7 @@ profile gpg @{exec_path} {
owner @{user_projects_dirs}/**/gnupg/ rw,
owner @{user_projects_dirs}/**/gnupg/** rwkl -> @{user_projects_dirs}/**/gnupg/**,
# only: apt
#aa:only apt
owner /etc/apt/keyrings/ rw,
owner /etc/apt/keyrings/** rwkl -> /etc/apt/keyrings/**,
@ -50,6 +50,7 @@ profile gpg @{exec_path} {
owner /var/lib/*/.gnupg/** rwkl -> /var/lib/*/.gnupg/**,
# TODO: Remove after zypper profile is created
#aa:only zypper
owner /var/tmp/zypp.@{rand6}/ rw,
owner /var/tmp/zypp.@{rand6}/** rwkl -> /var/tmp/zypp.@{rand6}/**,

2
apparmor.d/profiles-g-l/lightdm
View File

@ -46,7 +46,7 @@ profile lightdm @{exec_path} flags=(attach_disconnected) {
@{bin}/plymouth rPx,
@{bin}/gnome-keyring-daemon rPx,
@{lib}/security-misc/* rPUx, # only: whonix
@{lib}/security-misc/* rPUx, #aa:only whonix
@{lib}/{,at-spi2{,-core}/}at-spi-bus-launcher rPx,
/etc/X11/Xsession rPUx,

22
apparmor.d/profiles-m-r/packagekitd
View File

@ -63,15 +63,15 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
@{bin}/touch rix,
@{bin}/appstreamcli rPx,
@{bin}/arch-audit rPx, # only: arch
@{bin}/dpkg rPx -> child-dpkg, # only: dpkg
@{bin}/arch-audit rPx, #aa:only arch
@{bin}/dpkg rPx -> child-dpkg, #aa:only apt
@{bin}/fc-cache rPx,
@{bin}/glib-compile-schemas rPx,
@{bin}/install-info rPx,
@{bin}/rpmdb2solv rPUx, # only: opensuse
@{bin}/rpmdb2solv rPUx, #aa:only opensuse
@{bin}/systemd-inhibit rPx,
@{bin}/update-desktop-database rPx,
@{lib}/apt/methods/* rPx, # only: dpkg
@{lib}/apt/methods/* rPx, #aa:only apt
@{lib}/cnf-update-db rPx,
@{lib}/update-notifier/update-motd-updates-available rPx,
@{lib}/zypp/plugins/appdata/InstallAppdata rPUx, # TODO: write the profile
@ -94,10 +94,12 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
owner /tmp/packagekit* rw,
@{run}/systemd/inhibit/*.ref rw,
@{run}/zypp.pid rwk, # only: opensuse
owner @{run}/systemd/users/@{uid} r,
owner @{run}/zypp-rpm.pid rwk, # only: opensuse
owner @{run}/zypp/packages/ r, # only: opensuse
#aa:only opensuse
@{run}/zypp.pid rwk,
owner @{run}/zypp-rpm.pid rwk,
owner @{run}/zypp/packages/ r,
owner /dev/shm/AP_0x@{rand6}/{,**} rw,
owner /dev/shm/ r,
@ -132,10 +134,12 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
@{HOME}/@{XDG_GPG_DIR}/*.conf r,
owner /etc/pacman.d/gnupg/ r, # only: arch
#aa:only arch
owner /etc/pacman.d/gnupg/ r,
owner /etc/pacman.d/gnupg/** rwkl -> /tmp/pacman.d/gnupg/**,
owner /var/tmp/zypp.*/*/ r, # only: opensuse
#aa:only opensuse
owner /var/tmp/zypp.*/*/ r,
owner /var/tmp/zypp.*/*/** rwkl -> /var/tmp/zypp.*/zypp-trusted-*/**,
owner @{run}/user/@{uid}/gnupg/ r,