mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: do not set autostart or read access to log by default

Browse Source 
These settings are legitimate however:
- Start aa-notify only applies to desktop, and it is already enabled by default in some distribution.
- Allow the user to read the apparmor log is out of the scope of this project.
This commit is contained in:
Alexandre Pujol 2023-07-23 16:37:09 +01:00
parent 015db89b4d
commit 85e7832f0b
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
2 changed files with 0 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
root/etc/xdg/autostart/apparmor-notify.desktop
View File

@ -1,8 +0,0 @@
[Desktop Entry]
Type=Application
Name=AppArmor Notify
Comment=Receive on screen notifications of AppArmor denials
TryExec=aa-notify
Exec=aa-notify --poll --since-days 1 --wait 60 --file /var/log/audit/audit.log
StartupNotify=false
NoDisplay=true

2
root/usr/lib/sysusers.d/apparmor.d.conf
View File

@ -1,2 +0,0 @@
# Allow the user to read the apparmor log
g audit -