mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): add initial structure some snap tools.

Browse Source
This commit is contained in:
Alexandre Pujol 2023-12-06 20:02:15 +00:00
parent cc133e5f57
commit a777161846
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
5 changed files with 90 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
apparmor.d/profiles-s-z/snap-bootstrap Normal file
View File

@ -0,0 +1,16 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/snapd/snap-bootstrap
profile snap-bootstrap @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
include if exists <local/snap-bootstrap>
}

16
apparmor.d/profiles-s-z/snap-repair Normal file
View File

@ -0,0 +1,16 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/snapd/snap-repair
profile snap-repair @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
include if exists <local/snap-repair>
}

22
apparmor.d/profiles-s-z/snapd-aa-prompt-listener Normal file
View File

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{lib_dirs} = @{lib}/ /snap/snapd/@{int}@{lib}
@{exec_path} = @{lib_dirs}/snapd/snapd-aa-prompt-listener
profile snapd-aa-prompt-listener @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
@{lib_dirs}/snapd/info r,
@{PROC}/cmdline r,
include if exists <local/snapd-aa-prompt-listener>
}

20
apparmor.d/profiles-s-z/snapd-aa-prompt-ui Normal file
View File

@ -0,0 +1,20 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/snapd/snapd-aa-prompt-ui
profile snapd-aa-prompt-ui @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/snap/snapd/@{int}@{lib}/snapd/info r,
@{PROC}/cmdline r,
include if exists <local/snapd-aa-prompt-ui>
}

16
apparmor.d/profiles-s-z/snapd-core-fixup Normal file
View File

@ -0,0 +1,16 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/snapd/snapd.core-fixup.sh
profile snapd-core-fixup @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
include if exists <local/snapd-core-fixup>
}