mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profiles): mkinitcpio support for systemd hooks.

Browse source
This commit is contained in:
Alexandre Pujol 2022-12-09 18:55:42 +00:00
parent 372766f757
commit 90dc848766
Failed to generate hash of commit
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/pacman/mkinitcpio
View file

@ -30,7 +30,9 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/find rix, /{usr/,}bin/find rix,
/{usr/,}bin/findmnt rPx, /{usr/,}bin/findmnt rPx,
/{usr/,}bin/fsck rix, /{usr/,}bin/fsck rix,
/{usr/,}bin/getent rix,
/{usr/,}bin/grep rix, /{usr/,}bin/grep rix,
/{usr/,}bin/gzip rix,
/{usr/,}bin/hexdump rix, /{usr/,}bin/hexdump rix,
/{usr/,}bin/install rix, /{usr/,}bin/install rix,
/{usr/,}bin/ldconfig rix, /{usr/,}bin/ldconfig rix,
@ -51,6 +53,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/tput rix, /{usr/,}bin/tput rix,
/{usr/,}bin/uname rix, /{usr/,}bin/uname rix,
/{usr/,}bin/xz rix, /{usr/,}bin/xz rix,
/{usr/,}bin/zcat rix,
/{usr/,}bin/zstd rix, /{usr/,}bin/zstd rix,
/{usr/,}bin/{depmod,insmod} rPx, /{usr/,}bin/{depmod,insmod} rPx,
@ -81,8 +84,9 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
# Can copy any program to the initframs # Can copy any program to the initframs
/{usr/,}bin/ r, /{usr/,}bin/ r,
/{usr/,}bin/[a-z0-9]* mr, /{usr/,}bin/[a-z0-9]* mr,
/{usr/,}lib/ r,
/{usr/,}lib/plymouth/plymouthd-* mr, /{usr/,}lib/plymouth/plymouthd-* mr,
/{usr/,}lib/systemd/systemd-* mr, /{usr/,}lib/systemd/{,**} mr,
/{usr/,}lib/udev/[a-z0-9]* mr, /{usr/,}lib/udev/[a-z0-9]* mr,
# Manage /boot # Manage /boot