mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(abs): add more possible resolv.conf path in nameservice.

Browse source 
Used a lot by debian.
This commit is contained in:
Alexandre Pujol 2023-11-13 19:32:04 +00:00
parent 5a3dface8e
commit 6f98bb9bfb
Failed to generate hash of commit
10 changed files with 2 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/abstractions/nameservice-strict
View file

@ -23,6 +23,8 @@
/var/lib/extrausers/passwd r, /var/lib/extrausers/passwd r,
@{run}/nscd/db* r, @{run}/nscd/db* r,
@{run}/resolvconf/resolv.conf r,
@{run}/systemd/resolve/resolv.conf r,
@{run}/systemd/resolve/stub-resolv.conf r, @{run}/systemd/resolve/stub-resolv.conf r,
# NSS records from systemd-userdbd.service # NSS records from systemd-userdbd.service

1
apparmor.d/groups/apt/apt-methods-http
View file

@ -70,7 +70,6 @@ profile apt-methods-http @{exec_path} {
owner /tmp/apt-changelog-*/*.changelog rw, owner /tmp/apt-changelog-*/*.changelog rw,
@{run}/ubuntu-advantage/aptnews.json rw, @{run}/ubuntu-advantage/aptnews.json rw,
@{run}/resolvconf/resolv.conf r,
@{PROC}/1/cgroup r, @{PROC}/1/cgroup r,
@{PROC}/@{pid}/cgroup r, @{PROC}/@{pid}/cgroup r,

1
apparmor.d/groups/apt/unattended-upgrade
View file

@ -114,7 +114,6 @@ profile unattended-upgrade @{exec_path} flags=(attach_disconnected) {
/var/log/apt/{term,history}.log w, /var/log/apt/{term,history}.log w,
/var/log/apt/eipp.log.xz w, /var/log/apt/eipp.log.xz w,
@{run}/resolvconf/resolv.conf r,
@{run}/systemd/inhibit/[0-9]*.ref rw, @{run}/systemd/inhibit/[0-9]*.ref rw,
owner @{run}/unattended-upgrades.lock rwk, owner @{run}/unattended-upgrades.lock rwk,
owner @{run}/unattended-upgrades.pid rw, owner @{run}/unattended-upgrades.pid rw,

1
apparmor.d/groups/ssh/sshd
View file

@ -93,7 +93,6 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
@{run}/motd.d/{,*} r, @{run}/motd.d/{,*} r,
@{run}/motd.dynamic rw, @{run}/motd.dynamic rw,
@{run}/motd.dynamic.new rw, @{run}/motd.dynamic.new rw,
@{run}/resolvconf/resolv.conf r,
@{run}/systemd/notify w, @{run}/systemd/notify w,
@{run}/systemd/sessions/*.ref rw, @{run}/systemd/sessions/*.ref rw,
owner @{run}/sshd{,.init}.pid wl, owner @{run}/sshd{,.init}.pid wl,

1
apparmor.d/profiles-a-f/agetty
View file

@ -33,7 +33,6 @@ profile agetty @{exec_path} {
/etc/os-release r, /etc/os-release r,
/usr/etc/login.defs r, /usr/etc/login.defs r,
@{run}/resolvconf/resolv.conf r,
owner @{run}/agetty.reload rw, owner @{run}/agetty.reload rw,
/dev/tty@{int} rw, /dev/tty@{int} rw,

2
apparmor.d/profiles-a-f/etckeeper
View file

@ -57,8 +57,6 @@ profile etckeeper @{exec_path} {
owner @{HOME}/.netrc r, owner @{HOME}/.netrc r,
owner @{user_config_dirs}/git/{,*} rw, owner @{user_config_dirs}/git/{,*} rw,
@{run}/resolvconf/resolv.conf r,
owner /tmp/etckeeper-git* rw, owner /tmp/etckeeper-git* rw,
owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/fd/ r,

1
apparmor.d/profiles-a-f/fail2ban-server
View file

@ -35,7 +35,6 @@ profile fail2ban-server @{exec_path} flags=(attach_disconnected) {
@{run}/fail2ban/fail2ban.pid rw, @{run}/fail2ban/fail2ban.pid rw,
@{run}/fail2ban/fail2ban.sock rw, @{run}/fail2ban/fail2ban.sock rw,
@{run}/resolvconf/resolv.conf r,
owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/fd/ r,

2
apparmor.d/profiles-g-l/hostname
View file

@ -20,8 +20,6 @@ profile hostname @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
@{run}/resolvconf/resolv.conf r,
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r, deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
include if exists <local/hostname> include if exists <local/hostname>

2
apparmor.d/profiles-m-r/nullmailer-send
View file

@ -21,7 +21,5 @@ profile nullmailer-send @{exec_path} {
/var/spool/nullmailer/{,**} rw, /var/spool/nullmailer/{,**} rw,
@{run}/resolvconf/resolv.conf r,
include if exists <local/nullmailer-send> include if exists <local/nullmailer-send>
} }

1
apparmor.d/profiles-s-z/sudo
View file

@ -81,7 +81,6 @@ profile sudo @{exec_path} {
@{run}/ r, @{run}/ r,
@{run}/faillock/{,*} rwk, @{run}/faillock/{,*} rwk,
@{run}/resolvconf/resolv.conf r,
@{run}/systemd/sessions/* r, @{run}/systemd/sessions/* r,
owner @{run}/sudo/ rw, owner @{run}/sudo/ rw,
owner @{run}/sudo/ts/ rw, owner @{run}/sudo/ts/ rw,