mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-02-03 16:55:05 +01:00
fix(profile): minor improvment to ensure tests passes.
This commit is contained in:
parent
a1f5640024
commit
5bf8d362fa
5 changed files with 10 additions and 2 deletions
|
@ -34,7 +34,9 @@ profile apt @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
signal (send) peer=apt-methods-*,
|
signal (send) peer=apt-methods-*,
|
||||||
|
|
||||||
unix (bind) type=stream addr=@@{udbus}/bus/apt/system,
|
unix bind type=stream addr=@@{udbus}/bus/apt-get/system,
|
||||||
|
unix bind type=stream addr=@@{udbus}/bus/apt/system,
|
||||||
|
|
||||||
unix (send, receive) type=stream peer=(label=apt-esm-json-hook),
|
unix (send, receive) type=stream peer=(label=apt-esm-json-hook),
|
||||||
unix (send, receive) type=stream peer=(label=snapd),
|
unix (send, receive) type=stream peer=(label=snapd),
|
||||||
|
|
||||||
|
|
|
@ -30,8 +30,9 @@ profile apt-methods-file @{exec_path} {
|
||||||
|
|
||||||
@{lib}/apt/apt-helper rix,
|
@{lib}/apt/apt-helper rix,
|
||||||
|
|
||||||
/etc/apt/apt.conf.d/{,*} r,
|
/etc/apt/apt-mirrors.txt r,
|
||||||
/etc/apt/apt.conf r,
|
/etc/apt/apt.conf r,
|
||||||
|
/etc/apt/apt.conf.d/{,*} r,
|
||||||
/etc/apt/mirrors/* r,
|
/etc/apt/mirrors/* r,
|
||||||
|
|
||||||
/usr/share/dpkg/cputable r,
|
/usr/share/dpkg/cputable r,
|
||||||
|
|
|
@ -28,6 +28,7 @@ profile apt-methods-mirror @{exec_path} {
|
||||||
|
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
|
/etc/apt/apt-mirrors.txt r,
|
||||||
/etc/apt/mirrors/* r,
|
/etc/apt/mirrors/* r,
|
||||||
|
|
||||||
# For shell pwd
|
# For shell pwd
|
||||||
|
|
|
@ -34,6 +34,9 @@ profile dbus-system flags=(attach_disconnected) {
|
||||||
ptrace (read) peer=@{p_systemd},
|
ptrace (read) peer=@{p_systemd},
|
||||||
|
|
||||||
#aa:dbus own bus=system name=org.freedesktop.DBus path=/{,org/freedesktop/DBus}
|
#aa:dbus own bus=system name=org.freedesktop.DBus path=/{,org/freedesktop/DBus}
|
||||||
|
dbus receive bus=system path=/org/freedesktop/DBus
|
||||||
|
interface=org.freedesktop.DBus
|
||||||
|
peer=(name=@{busname}),
|
||||||
|
|
||||||
@{exec_path} mrix,
|
@{exec_path} mrix,
|
||||||
|
|
||||||
|
|
|
@ -45,6 +45,7 @@ profile apparmor_parser @{exec_path} flags=(attach_disconnected) {
|
||||||
owner @{PROC}/@{pid}/mounts r,
|
owner @{PROC}/@{pid}/mounts r,
|
||||||
|
|
||||||
deny network netlink raw, # file_inherit
|
deny network netlink raw, # file_inherit
|
||||||
|
deny /apparmor/.null rw,
|
||||||
|
|
||||||
include if exists <local/apparmor_parser>
|
include if exists <local/apparmor_parser>
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue