mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

run-parts: 0anacron rPUx -> rix, and some other additions

Browse source 
The rule
`/etc/cron.{hourly,daily,weekly,monthly}/0anacron            rPUx, `

causes the error:
`ALLOWED run-parts exec /etc/cron.hourly/0anacron info="no new privs" comm=run-parts requested_mask=x denied_mask=x class=file error=-1`
This commit is contained in:
curiosityseeker 2023-04-28 18:59:33 +02:00 committed by Alex
parent 2e4788c51e
commit 72227923c8
1 changed files with 8 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/profiles-m-r/run-parts
View file

@ -16,7 +16,10 @@ profile run-parts @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/{usr/,}bin/anacron rix,
/{usr/,}bin/{,ba,da}sh rix, /{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/date rix,
/{usr/,}bin/nice rix, /{usr/,}bin/nice rix,
/{usr/,}bin/snapper rix, /{usr/,}bin/snapper rix,
@ -25,12 +28,14 @@ profile run-parts @{exec_path} {
/usr/share/update-notifier/notify-updates-outdated rPx, /usr/share/update-notifier/notify-updates-outdated rPx,
/etc/ r, /etc/ r,
/etc/anacrontab r,
/etc/conf.d/snapper{,**} r, /etc/conf.d/snapper{,**} r,
/etc/snapper/configs/root r,
# Crontab # Crontab
/etc/cron.{hourly,daily,weekly,monthly}/ r, /etc/cron.{hourly,daily,weekly,monthly}/ r,
/etc/cron.{hourly,daily,weekly,monthly}/0anacron rPUx, /etc/cron.{hourly,daily,weekly,monthly}/0anacron rix,
/etc/cron.{hourly,daily,weekly,monthly}/apport rPx, /etc/cron.{hourly,daily,weekly,monthly}/apport rPx,
/etc/cron.{hourly,daily,weekly,monthly}/apt-compat rPx, /etc/cron.{hourly,daily,weekly,monthly}/apt-compat rPx,
/etc/cron.{hourly,daily,weekly,monthly}/apt-listbugs rPx, /etc/cron.{hourly,daily,weekly,monthly}/apt-listbugs rPx,
@ -127,6 +132,8 @@ profile run-parts @{exec_path} {
owner /tmp/#[0-9]*[0-9] rw, owner /tmp/#[0-9]*[0-9] rw,
owner /tmp/$anacron* rw, owner /tmp/$anacron* rw,
owner @{sys}/class/power_supply/ r,
/dev/tty[0-9]* rw, /dev/tty[0-9]* rw,
profile motd { profile motd {