mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 17:08:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

udevadm -> systemd-udevd

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-02 10:22:54 +01:00
parent facade62b6
commit 6fd5d5f56f
Failed to generate hash of commit
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/profiles-m-z/udevadm → apparmor.d/groups/systemd/systemd-udevd
View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov # Copyright (C) 2019-2021 Mikhail Morfikov
# 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>, abi <abi/3.0>,
@ -8,7 +9,7 @@ include <tunables/global>
@{exec_path} = /{usr/,}bin/udevadm @{exec_path} = /{usr/,}bin/udevadm
@{exec_path} += /{usr/,}lib/systemd/systemd-udevd @{exec_path} += /{usr/,}lib/systemd/systemd-udevd
profile udevadm @{exec_path} flags=(complain,attach_disconnected) { profile systemd-udevd @{exec_path} flags=(attach_disconnected complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/consoles> include <abstractions/consoles>
@ -24,6 +25,7 @@ profile udevadm @{exec_path} flags=(complain,attach_disconnected) {
capability chown, capability chown,
capability fsetid, capability fsetid,
capability sys_module, capability sys_module,
capability mknod,
ptrace (read), ptrace (read),
@ -40,7 +42,7 @@ profile udevadm @{exec_path} flags=(complain,attach_disconnected) {
/{usr/,}bin/logger rix, /{usr/,}bin/logger rix,
/{usr/,}bin/nohup rix, /{usr/,}bin/nohup rix,
/{usr/,}sbin/* rPUx, /{usr/,}{s,}bin/* rPUx,
/{usr/,}lib/udev/* rPUx, /{usr/,}lib/udev/* rPUx,
/{usr/,}lib/systemd/systemd-* rPUx, /{usr/,}lib/systemd/systemd-* rPUx,
@ -87,5 +89,5 @@ profile udevadm @{exec_path} flags=(complain,attach_disconnected) {
# file_inherit # file_inherit
owner @{HOME}/.xsession-errors w, owner @{HOME}/.xsession-errors w,
include if exists <local/udevadm> include if exists <local/systemd-udevd>
} }