mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update acpid

Browse source
This commit is contained in:
nobodysu 2021-12-24 00:00:41 +00:00 committed by GitHub
parent accf5538bd
commit 5c1a1f6f8e
Failed to generate hash of commit
1 changed files with 22 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
apparmor.d/profiles-a-f/acpid
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = /{usr/,}bin/acpid @{exec_path} = /{usr/,}{,s}bin/acpid
profile acpid @{exec_path} flags=(attach_disconnected) { profile acpid @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
@ -22,15 +22,34 @@ profile acpid @{exec_path} flags=(attach_disconnected) {
/etc/acpi/{,**} r, /etc/acpi/{,**} r,
/etc/acpi/handler.sh rix, /etc/acpi/handler.sh rix,
/etc/acpi/powerbtn-acpi-support.sh rix,
/dev/input/{,**} r, /dev/input/{,**} r,
/dev/tty rw, /dev/tty rw,
/dev/null r,
owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/loginuid r, owner @{PROC}/@{pid}/loginuid r,
@{run}/acpid.socket rw, owner @{run}/acpid.socket rw,
owner @{run}/acpid.pid rw,
/usr/share/acpi-support/** r,
# powerbtn-acpi-support.sh
/{usr/,}bin/sed rix,
/{usr/,}bin/ps rPx,
/{usr/,}bin/fgconsole rCx,
profile fgconsole /usr/bin/fgconsole {
/{usr/,}bin/fgconsole r,
include <abstractions/base>
capability sys_tty_config,
/dev/tty rw,
owner /dev/tty[0-9]* rw,
}
include if exists <local/acpid> include if exists <local/acpid>
} }