mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add goa-daemon and its id service.

Browse Source
This commit is contained in:
Alexandre Pujol 2021-04-02 00:05:19 +01:00
parent df7211667c
commit 9b19b979d6
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
2 changed files with 54 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
apparmor.d/groups/gnome/goa-daemon Normal file
View File

@ -0,0 +1,34 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-3.0-or-later
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/goa-daemon
profile goa-daemon @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
include <abstractions/p11-kit>
include <abstractions/openssl>
network inet stream,
network inet6 stream,
network inet dgram,
network inet6 dgram,
network netlink raw,
@{exec_path} mr,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{user_config_dirs}/goa-1.0/accounts.conf r,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
include if exists <local/goa-daemon>
}

20
apparmor.d/groups/gnome/goa-identity-service Normal file
View File

@ -0,0 +1,20 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-3.0-or-later
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/goa-identity-service
profile goa-identity-service @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
# Kerberos authentication
/etc/krb5.conf r,
deny /etc/krb5.conf w,
include if exists <local/goa-identity-service>
}