fix(profile): minor improvment to ensure tests passes.

This commit is contained in:
Alexandre Pujol 2024-11-19 19:49:22 +00:00
parent a1f5640024
commit 5bf8d362fa
Failed to generate hash of commit
5 changed files with 10 additions and 2 deletions

View file

@ -34,7 +34,9 @@ profile apt @{exec_path} flags=(attach_disconnected) {
signal (send) peer=apt-methods-*,
unix (bind) type=stream addr=@@{udbus}/bus/apt/system,
unix bind type=stream addr=@@{udbus}/bus/apt-get/system,
unix bind type=stream addr=@@{udbus}/bus/apt/system,
unix (send, receive) type=stream peer=(label=apt-esm-json-hook),
unix (send, receive) type=stream peer=(label=snapd),

View file

@ -30,8 +30,9 @@ profile apt-methods-file @{exec_path} {
@{lib}/apt/apt-helper rix,
/etc/apt/apt.conf.d/{,*} r,
/etc/apt/apt-mirrors.txt r,
/etc/apt/apt.conf r,
/etc/apt/apt.conf.d/{,*} r,
/etc/apt/mirrors/* r,
/usr/share/dpkg/cputable r,

View file

@ -28,6 +28,7 @@ profile apt-methods-mirror @{exec_path} {
@{exec_path} mr,
/etc/apt/apt-mirrors.txt r,
/etc/apt/mirrors/* r,
# For shell pwd

View file

@ -34,6 +34,9 @@ profile dbus-system flags=(attach_disconnected) {
ptrace (read) peer=@{p_systemd},
#aa:dbus own bus=system name=org.freedesktop.DBus path=/{,org/freedesktop/DBus}
dbus receive bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
peer=(name=@{busname}),
@{exec_path} mrix,

View file

@ -45,6 +45,7 @@ profile apparmor_parser @{exec_path} flags=(attach_disconnected) {
owner @{PROC}/@{pid}/mounts r,
deny network netlink raw, # file_inherit
deny /apparmor/.null rw,
include if exists <local/apparmor_parser>
}