mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update pacman (#193)

Browse source 
* Update pacman

`@{exec_path} mr,` is causing the following errors:

```
ALLOWED pacman exec owner /usr/bin/pacman -> pacman//null-/usr/bin/pacman comm=bash requested_mask=x denied_mask=x
ALLOWED pacman//null-/usr/bin/pacman file_inherit owner /dev/pts/4 comm=pacman requested_mask=wr denied_mask=wr
ALLOWED pacman//null-/usr/bin/pacman file_mmap owner /usr/bin/pacman comm=pacman requested_mask=r denied_mask=r
ALLOWED pacman//null-/usr/bin/pacman file_mmap owner /usr/lib/ld-linux-x86-64.so.2 comm=pacman requested_mask=r denied_mask=r
ALLOWED pacman//null-/usr/bin/pacman open owner /etc/ld.so.preload comm=pacman requested_mask=r denied_mask=r
ALLOWED pacman//null-/usr/bin/pacman getattr owner /etc/ld.so.preload comm=pacman requested_mask=r denied_mask=r
ALLOWED pacman//null-/usr/bin/pacman open owner /etc/ld.so.cache comm=pacman requested_mask=r denied_mask=r
ALLOWED pacman//null-/usr/bin/pacman getattr owner /etc/ld.so.cache comm=pacman requested_mask=r denied_mask=r
ALLOWED pacman//null-/usr/bin/pacman open owner /usr/lib/libalpm.so.13.0.2 comm=pacman requested_mask=r denied_mask=r
ALLOWED pacman//null-/usr/bin/pacman getattr owner /usr/lib/libalpm.so.13.0.2 comm=pacman requested_mask=r denied_mask=r

etc.
```
`@{exec_path} mrix,`  fixes it. 

Commits for new profiles for `checkrebuild` and `pkgfile`  will follow.

* Fix pacman update

* Update apparmor.d/groups/pacman/pacman

Co-authored-by: Alex <roddhjav@users.noreply.github.com>

---------

Co-authored-by: Alex <roddhjav@users.noreply.github.com>
This commit is contained in:
curiosityseeker 2023-08-17 20:49:56 +02:00 committed by GitHub
parent c2c745888c
commit 7b018a60bd
Failed to generate hash of commit
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/groups/pacman/pacman
View file

@ -43,7 +43,7 @@ profile pacman @{exec_path} {
ptrace (read), ptrace (read),
@{exec_path} mr, @{exec_path} mrix,
@{bin}/gpg{,2} rCx -> gpg, @{bin}/gpg{,2} rCx -> gpg,
@{bin}/gpgconf rCx -> gpg, @{bin}/gpgconf rCx -> gpg,
@ -58,11 +58,13 @@ profile pacman @{exec_path} {
@{bin}/archlinux-java rPx, @{bin}/archlinux-java rPx,
@{bin}/bootctl rPx, @{bin}/bootctl rPx,
@{bin}/cat rix, @{bin}/cat rix,
@{bin}/checkrebuild rPUx,
@{bin}/chgrp rix, @{bin}/chgrp rix,
@{bin}/chmod rix, @{bin}/chmod rix,
@{bin}/cp rix, @{bin}/cp rix,
@{bin}/dconf rPx, @{bin}/dconf rPx,
@{bin}/dot rix, @{bin}/dot rix,
@{bin}/echo rix,
@{bin}/env rix, @{bin}/env rix,
@{bin}/fc-cache{,-32} rPx, @{bin}/fc-cache{,-32} rPx,
@{bin}/filecap rix, @{bin}/filecap rix,
@ -87,12 +89,15 @@ profile pacman @{exec_path} {
@{bin}/ln rix, @{bin}/ln rix,
@{bin}/locale-gen rPx, @{bin}/locale-gen rPx,
@{bin}/mkinitcpio rPx, @{bin}/mkinitcpio rPx,
@{bin}/needrestart rPx,
@{bin}/pacdiff rPx, @{bin}/pacdiff rPx,
@{bin}/pacman-key rPx, @{bin}/pacman-key rPx,
@{bin}/perl rix, @{bin}/perl rix,
@{bin}/pkgfile rPUx,
@{bin}/pkill rix, @{bin}/pkill rix,
@{bin}/pwd rix, @{bin}/pwd rix,
@{bin}/rm rix, @{bin}/rm rix,
@{bin}/rsync rix,
@{bin}/sbctl rPx, @{bin}/sbctl rPx,
@{bin}/sed rix, @{bin}/sed rix,
@{bin}/setcap rix, @{bin}/setcap rix,
@ -102,8 +107,10 @@ profile pacman @{exec_path} {
@{bin}/touch rix, @{bin}/touch rix,
@{bin}/tput rix, @{bin}/tput rix,
@{bin}/update-ca-trust rPx, @{bin}/update-ca-trust rPx,
@{bin}/uname rPx,
@{bin}/update-desktop-database rPx, @{bin}/update-desktop-database rPx,
@{bin}/update-mime-database rPx, @{bin}/update-mime-database rPx,
@{bin}/update-grub rPx,
@{bin}/vercmp rix, @{bin}/vercmp rix,
@{bin}/xmlcatalog rix, @{bin}/xmlcatalog rix,
@{lib}/ghc-*/bin/ghc-pkg rix, @{lib}/ghc-*/bin/ghc-pkg rix,
@ -174,6 +181,8 @@ profile pacman @{exec_path} {
/etc/pacman.d/gnupg/** rwkl, /etc/pacman.d/gnupg/** rwkl,
@{HOME}/@{XDG_GPG_DIR}/*.conf r, @{HOME}/@{XDG_GPG_DIR}/*.conf r,
deny @{user_share_dirs}/sddm/* rw,
/dev/tty[0-9]* rw, /dev/tty[0-9]* rw,
owner /dev/pts/[0-9]* rw, owner /dev/pts/[0-9]* rw,