mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): apply profile guideline on secure-time-sync.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-01-24 21:03:49 +00:00
parent c3e92b3408
commit 9a65da3605
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
2 changed files with 12 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
apparmor.d/profiles-s-z/secure-time-sync
View File

@ -1,4 +1,5 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -17,13 +18,16 @@ profile secure-time-sync @{exec_path} flags=(attach_disconnected) {
network inet dgram,
network inet6 dgram,
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{bin}/curl rix,
@{bin}/date rix,
@{bin}/grep rix,
@{bin}/id rPx,
@{bin}/sed rix,
owner /dev/tty rw,
/usr/bin/bash ix,
/usr/bin/curl mrix,
/usr/bin/date mrix,
/usr/bin/grep mrix,
/usr/bin/id mrix,
/usr/bin/sed mrix,
@{exec_path} r,
include if exists <local/secure-time-sync>
}

1
dists/flags/main.flags
View File

@ -291,6 +291,7 @@ runuser complain
s3fs complain
sdcv complain
sddm attach_disconnected,mediate_deleted,complain
secure-time-sync attach_disconnected,complain
sftp-server complain
sing-box complain
slirp4netns attach_disconnected,complain