mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-24 11:58:12 +01:00
fix(profile): minor improvment to ensure tests passes.
This commit is contained in:
parent
a1f5640024
commit
5bf8d362fa
5 changed files with 10 additions and 2 deletions
|
@ -34,7 +34,9 @@ profile apt @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
signal (send) peer=apt-methods-*,
|
||||
|
||||
unix (bind) type=stream addr=@@{udbus}/bus/apt/system,
|
||||
unix bind type=stream addr=@@{udbus}/bus/apt-get/system,
|
||||
unix bind type=stream addr=@@{udbus}/bus/apt/system,
|
||||
|
||||
unix (send, receive) type=stream peer=(label=apt-esm-json-hook),
|
||||
unix (send, receive) type=stream peer=(label=snapd),
|
||||
|
||||
|
|
|
@ -30,8 +30,9 @@ profile apt-methods-file @{exec_path} {
|
|||
|
||||
@{lib}/apt/apt-helper rix,
|
||||
|
||||
/etc/apt/apt.conf.d/{,*} r,
|
||||
/etc/apt/apt-mirrors.txt r,
|
||||
/etc/apt/apt.conf r,
|
||||
/etc/apt/apt.conf.d/{,*} r,
|
||||
/etc/apt/mirrors/* r,
|
||||
|
||||
/usr/share/dpkg/cputable r,
|
||||
|
|
|
@ -28,6 +28,7 @@ profile apt-methods-mirror @{exec_path} {
|
|||
|
||||
@{exec_path} mr,
|
||||
|
||||
/etc/apt/apt-mirrors.txt r,
|
||||
/etc/apt/mirrors/* r,
|
||||
|
||||
# For shell pwd
|
||||
|
|
|
@ -34,6 +34,9 @@ profile dbus-system flags=(attach_disconnected) {
|
|||
ptrace (read) peer=@{p_systemd},
|
||||
|
||||
#aa:dbus own bus=system name=org.freedesktop.DBus path=/{,org/freedesktop/DBus}
|
||||
dbus receive bus=system path=/org/freedesktop/DBus
|
||||
interface=org.freedesktop.DBus
|
||||
peer=(name=@{busname}),
|
||||
|
||||
@{exec_path} mrix,
|
||||
|
||||
|
|
|
@ -45,6 +45,7 @@ profile apparmor_parser @{exec_path} flags=(attach_disconnected) {
|
|||
owner @{PROC}/@{pid}/mounts r,
|
||||
|
||||
deny network netlink raw, # file_inherit
|
||||
deny /apparmor/.null rw,
|
||||
|
||||
include if exists <local/apparmor_parser>
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue