mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-11-27 19:00:18 +00:00
parent 319bea17c3
commit 52278490ab
Failed to generate hash of commit
8 changed files with 21 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/gnome-software
View file

@ -130,6 +130,7 @@ profile gnome-software @{exec_path} {
owner /tmp/ostree-gpg-*/ r, owner /tmp/ostree-gpg-*/ r,
owner /tmp/ostree-gpg-*/** rwkl -> /tmp/ostree-gpg-*/**, owner /tmp/ostree-gpg-*/** rwkl -> /tmp/ostree-gpg-*/**,
include if exists <local/gnome-software_gpg>
} }
profile fusermount { profile fusermount {
@ -149,6 +150,7 @@ profile gnome-software @{exec_path} {
/dev/fuse rw, /dev/fuse rw,
include if exists <local/gnome-software_fusermount>
} }
include if exists <local/gnome-software> include if exists <local/gnome-software>

4
apparmor.d/groups/systemd/systemd-generator-cryptsetup
View file

@ -16,5 +16,9 @@ profile systemd-generator-cryptsetup @{exec_path} flags=(attach_disconnected) {
/etc/crypttab r, /etc/crypttab r,
@{run}/systemd/generator/{,**} rw,
@{PROC}/@{pid}/cgroup r,
include if exists <local/systemd-generator-cryptsetup> include if exists <local/systemd-generator-cryptsetup>
} }

3
apparmor.d/groups/systemd/systemd-generator-environment-flatpak
View file

@ -9,10 +9,13 @@ include <tunables/global>
@{exec_path} = @{lib}/systemd/system-environment-generators/60-flatpak-system-only @{exec_path} = @{lib}/systemd/system-environment-generators/60-flatpak-system-only
profile systemd-generator-environment-flatpak @{exec_path} { profile systemd-generator-environment-flatpak @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict>
@{exec_path} mr, @{exec_path} mr,
@{bin}/flatpak rix, @{bin}/flatpak rix,
/dev/tty rw,
include if exists <local/systemd-generator-environment-flatpak> include if exists <local/systemd-generator-environment-flatpak>
} }

2
apparmor.d/groups/systemd/systemd-generator-ostree
View file

@ -12,5 +12,7 @@ profile systemd-generator-ostree @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr, @{exec_path} mr,
@{PROC}/cmdline r,
include if exists <local/systemd-generator-ostree> include if exists <local/systemd-generator-ostree>
} }

3
apparmor.d/groups/systemd/systemd-udevd
View file

@ -46,13 +46,16 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
@{bin}/dmsetup rPUx, @{bin}/dmsetup rPUx,
@{bin}/ethtool rix, @{bin}/ethtool rix,
@{bin}/kmod rPx, @{bin}/kmod rPx,
@{bin}/less rPx -> child-pager,
@{bin}/ln rix, @{bin}/ln rix,
@{bin}/logger rix, @{bin}/logger rix,
@{bin}/lvm rPx, @{bin}/lvm rPx,
@{bin}/mknod rPx, @{bin}/mknod rPx,
@{bin}/more rPx -> child-pager,
@{bin}/multipath rPx, @{bin}/multipath rPx,
@{bin}/nfsrahead rix, @{bin}/nfsrahead rix,
@{bin}/nohup rix, @{bin}/nohup rix,
@{bin}/pager rPx -> child-pager,
@{bin}/perl rix, @{bin}/perl rix,
@{bin}/readlink rix, @{bin}/readlink rix,
@{bin}/sed rix, @{bin}/sed rix,

3
apparmor.d/profiles-a-f/file-roller
View file

@ -40,6 +40,9 @@ profile file-roller @{exec_path} {
@{bin}/zstd rix, @{bin}/zstd rix,
@{lib}/p7zip/7z rix, @{lib}/p7zip/7z rix,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
/usr/share/themes/{,**} r, /usr/share/themes/{,**} r,
/usr/share/X11/xkb/{,**} r, /usr/share/X11/xkb/{,**} r,

4
apparmor.d/profiles-a-f/flatpak-app
View file

@ -19,9 +19,9 @@ profile flatpak-app flags=(attach_disconnected,mediate_deleted) {
network inet6 stream, network inet6 stream,
network netlink raw, network netlink raw,
ptrace peer=flatpak-bwrap//&flatpak-app, ptrace peer=flatpak-app//&flatpak-bwrap,
signal peer=flatpak-bwrap//&flatpak-app, signal peer=flatpak-app//&flatpak-bwrap,
@{bin}/** rmix, @{bin}/** rmix,
@{lib}/** rmix, @{lib}/** rmix,

4
apparmor.d/profiles-a-f/flatpak-bwrap
View file

@ -31,9 +31,9 @@ profile flatpak-bwrap flags=(attach_disconnected,mediate_deleted) {
pivot_root oldroot=/newroot/ -> /newroot/, pivot_root oldroot=/newroot/ -> /newroot/,
pivot_root oldroot=/tmp/oldroot/ -> /tmp/, pivot_root oldroot=/tmp/oldroot/ -> /tmp/,
ptrace peer=flatpak-bwrap//&flatpak-app, ptrace peer=flatpak-app//&flatpak-bwrap,
signal peer=flatpak-bwrap//&flatpak-app, signal peer=flatpak-app//&flatpak-bwrap,
@{bin}/** rmix, @{bin}/** rmix,
@{lib}/** rmix, @{lib}/** rmix,