mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-02-20 08:55:34 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-10-13 00:05:53 +01:00
parent 387f2f91fc
commit 5f47df0b79
Failed to generate hash of commit
6 changed files with 20 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/apt/unattended-upgrade
View file

@ -110,6 +110,7 @@ profile unattended-upgrade @{exec_path} flags=(attach_disconnected) {
/var/cache/apt/{,**} rwk,
/var/lib/apt/extended_states{,.*} rw,
/var/lib/apt/periodic/ w,
/var/log/apt/{term,history}.log w,
/var/log/apt/eipp.log.xz w,

4
apparmor.d/groups/bus/dbus-daemon
View file

@ -54,10 +54,12 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
@{lib}/telepathy/mission-control-5 rPx,
@{lib}/xfce[0-9]/xfconf/xfconfd rPx,
/usr/share/gnome-documents/org.gnome.Documents rPx,
/usr/share/gnome-maps/org.gnome.Maps rPUx,
/usr/share/gnome-shell/extensions/gsconnect@andyholmes.github.io/service/daemon.js rPx,
/usr/share/org.gnome.Characters/org.gnome.Characters rPx,
/usr/share/org.gnome.Characters/org.gnome.Characters.BackgroundService rPx,
@{user_share_dirs}/gnome-shell/extensions/gsconnect@andyholmes.github.io/service/daemon.js rPx,
/usr/share/gnome-shell/extensions/gsconnect@andyholmes.github.io/service/daemon.js rPx,
/etc/dbus-1/{,**} r,

3
apparmor.d/groups/gnome/gnome-extensions-app
View file

@ -25,6 +25,9 @@ profile gnome-extensions-app @{exec_path} {
@{bin}/{,ba,da}sh rix,
@{bin}/gjs-console rix,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rPx -> child-open,
@{lib}/gio-launch-desktop rPx -> child-open,
/usr/share/gnome-shell/org.gnome.Extensions* r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/terminfo/x/xterm-256color r,

10
apparmor.d/groups/network/iwd
View file

@ -27,12 +27,12 @@ profile iwd @{exec_path} {
/etc/iwd/{,**} r,
/var/lib/iwd/{,**} rw,
@{sys}/devices/pci[0-9]*/**/ieee80211/phy[0-9]/* r,
@{sys}/devices/pci[0-9]*/**/modalias r,
@{sys}/devices/@{pci}/ieee80211/phy[0-9]/* r,
@{sys}/devices/@{pci}/modalias r,
@{PROC}/sys/net/ipv{4,6}/conf/wlan[0-9]*/arp_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan[0-9]*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan[0-9]*/ndisc_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan@{int}/arp_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan@{int}/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan@{int}/ndisc_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/arp_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/ndisc_* rw,

12
apparmor.d/profiles-g-l/git
View file

@ -7,13 +7,11 @@ abi <abi/3.0>,
include <tunables/global>
@{lib_dirs} = @{lib}/git/ @{lib}/git-core/
@{code_config_dirs} = @{user_config_dirs}/Code* @{HOME}/.vscode{,-oss}
@{exec_path} = @{bin}/git
@{exec_path} += @{bin}/git-*
@{exec_path} += @{lib}/git-core/git
@{exec_path} += @{lib}/git-core/git-*
@{exec_path} += @{lib}/git-core/mergetools/*
@{exec_path} = @{bin}/git @{bin}/git-*
@{exec_path} += @{lib_dirs}/git @{lib_dirs}/git-* @{lib_dirs}/mergetools/*
profile git @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
@ -79,7 +77,7 @@ profile git @{exec_path} {
@{bin}/vim rCx -> editor,
@{bin}/vim.* rCx -> editor,
/usr/share/git-core/{,**} r,
/usr/share/git{,-core}/{,**} r,
/usr/share/terminfo/x/xterm-256color r,
/etc/mailname r,
@ -87,8 +85,10 @@ profile git @{exec_path} {
owner @{user_projects_dirs}/ rw,
owner @{user_projects_dirs}/** rwkl -> @{user_projects_dirs}/**,
owner @{user_projects_dirs}/**/.git/hooks/* rix,
owner @{user_cache_dirs}/*/ rw,
owner @{user_cache_dirs}/*/** rwkl -> @{user_cache_dirs}/*/**,
owner /tmp/** rwkl -> /tmp/**,
owner /tmp/**/bin/* rCx -> exec,

3
apparmor.d/profiles-m-r/pcscd
View file

@ -15,8 +15,9 @@ profile pcscd @{exec_path} {
network netlink raw,
ptrace (read) peer=rngd,
ptrace (read) peer=pkcs11-register,
ptrace (read) peer=rngd,
ptrace (read) peer=scdaemon,
@{exec_path} mr,