mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Various ZFS fixes

Browse Source
This commit is contained in:
Jeroen Rijken 2022-08-01 18:31:06 +02:00 committed by Alex
parent 005dec1a53
commit 575d781c88
3 changed files with 13 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apparmor.d/profiles-s-z/zfs
View File

@ -20,6 +20,10 @@ profile zfs @{exec_path} {
/etc/zfs/zfs-list.cache/{,*} rwk, /etc/zfs/zfs-list.cache/{,*} rwk,
# Sanoid generates temorary files with random names including underscores, directly under /tmp.
# https://github.com/jimsalterjrs/sanoid/issues/758
/tmp/* rw,
@{run}/zfs-list.cache@* rw, @{run}/zfs-list.cache@* rw,
@{PROC}/@{pids}/mounts r, @{PROC}/@{pids}/mounts r,

1
apparmor.d/profiles-s-z/zpool
View File

@ -29,6 +29,7 @@ profile zpool @{exec_path} {
@{sys}/bus/pci/slots/ r, @{sys}/bus/pci/slots/ r,
@{sys}/bus/pci/slots/[0-9]*/address r, @{sys}/bus/pci/slots/[0-9]*/address r,
@{PROC}/@{pids}/mountinfo r,
@{PROC}/@{pids}/mounts r, @{PROC}/@{pids}/mounts r,
@{PROC}/sys/kernel/spl/hostid r, @{PROC}/sys/kernel/spl/hostid r,

17
apparmor.d/profiles-s-z/zsys-system-autosnapshot
View File

@ -9,14 +9,15 @@ include <tunables/global>
@{exec_path} = @{libexec}/zsys-system-autosnapshot @{exec_path} = @{libexec}/zsys-system-autosnapshot
profile zsys-system-autosnapshot @{exec_path} flags=(complain) { profile zsys-system-autosnapshot @{exec_path} flags=(complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles>
@{exec_path} rm, @{exec_path} rm,
/{usr/,}bin/{,ba,da}sh rix, /{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/cat rix, /{usr/,}bin/cat rix,
/{usr/,}bin/cp rix, /{usr/,}bin/cp rix,
/{usr/,}bin/rm rix, /{usr/,}bin/rm rix,
/{usr/,}bin/zsysctl rPx, /{usr/,}{s,}bin/zsysctl rPx,
/{usr/,}bin/zsysd rPx, /{usr/,}{s,}bin/zsysd rPx,
/var/log/unattended-upgrades/unattended-upgrades-dpkg.log rw, /var/log/unattended-upgrades/unattended-upgrades-dpkg.log rw,
@ -24,7 +25,5 @@ profile zsys-system-autosnapshot @{exec_path} flags=(complain) {
@{run}/zsys-snapshot.unattended-upgrades rw, @{run}/zsys-snapshot.unattended-upgrades rw,
@{run}/unattended-upgrades.pid r, @{run}/unattended-upgrades.pid r,
/dev/pts/[0-9]* rw,
include if exists <local/zsys-system-autosnapshot> include if exists <local/zsys-system-autosnapshot>
} }