mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-02-06 18:25:05 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Small fixes

Browse source
This commit is contained in:
Jeroen Rijken 2022-07-16 21:20:30 +02:00 committed by Alex
parent 5a02490082
commit 70aa5fdbb2
3 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/abstractions/disks-read
View file

@ -8,7 +8,7 @@
/dev/ r, /dev/ r,
/dev/block/ r, /dev/block/ r,
/dev/disk/*/ r, /dev/disk/{,*/} r,
# Regular disk/partition devices # Regular disk/partition devices
/dev/{s,v}d[a-z]* rk, /dev/{s,v}d[a-z]* rk,
@ -37,14 +37,14 @@
# LUKS/LVM (device-mapper) devices # LUKS/LVM (device-mapper) devices
/dev/dm-[0-9]* rk, /dev/dm-[0-9]* rk,
/dev/mapper/* r, /dev/mapper/{,*} r,
@{sys}/devices/virtual/block/dm-[0-9]*/ r, @{sys}/devices/virtual/block/dm-[0-9]*/ r,
@{sys}/devices/virtual/block/dm-[0-9]*/** r, @{sys}/devices/virtual/block/dm-[0-9]*/** r,
# ZFS devices # ZFS devices
/dev/zd[0-9]* rk, /dev/zd[0-9]* rk,
/dev/zvol/ r, /dev/zvol/{,*/} r,
/dev/zvol/*/ r, /dev/*pool/ r,
@{sys}/devices/virtual/block/zd[0-9]*/ r, @{sys}/devices/virtual/block/zd[0-9]*/ r,
@{sys}/devices/virtual/block/zd[0-9]*/** r, @{sys}/devices/virtual/block/zd[0-9]*/** r,

2
apparmor.d/groups/virt/cni-loopback
View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = /{usr/,}lib/cni/loopback /opt/cni/bin/loopback @{exec_path} = /{usr/,}lib/cni/loopback /opt/cni/bin/loopback
profile cni-loopback @{exec_path} { profile cni-loopback @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
@{exec_path} mr, @{exec_path} mr,

2
apparmor.d/groups/virt/containerd
View file

@ -56,7 +56,7 @@ profile containerd @{exec_path} flags=(attach_disconnected) {
/opt/containerd/{,**} rw, /opt/containerd/{,**} rw,
/var/lib/cni/results/cni-loopback-@{uuid}-lo l, /var/lib/cni/results/cni-loopback-@{uuid}-lo wl,
/var/lib/containerd/{,**} rwk, /var/lib/containerd/{,**} rwk,
/var/lib/containerd/tmpmounts/containerd-mount[0-9]*/** l, /var/lib/containerd/tmpmounts/containerd-mount[0-9]*/** l,
/var/lib/docker/containerd/{,**} rwk, /var/lib/docker/containerd/{,**} rwk,