mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profiles): add some missing ubuntu profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-14 19:09:50 +01:00
parent fb61f8ebff
commit a792c4cb4e
Failed to generate hash of commit
3 changed files with 83 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
apparmor.d/groups/ubuntu/apt-esm-json-hook Normal file
View file

@ -0,0 +1,16 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ubuntu-advantage/apt-esm-json-hook
profile apt-esm-json-hook @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
include if exists <local/apt-esm-json-hook>
}

21
apparmor.d/groups/ubuntu/release-upgrade-motd Normal file
View file

@ -0,0 +1,21 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ubuntu-release-upgrader/release-upgrade-motd
profile release-upgrade-motd @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/date rix,
/{usr/,}bin/expr rix,
/{usr/,}bin/stat rix,
include if exists <local/release-upgrade-motd>
}

46
apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot Normal file
View file

@ -0,0 +1,46 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/update-notifier/update-motd-fsck-at-reboot
profile update-motd-fsck-at-reboot @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/{usr/,}{s,}bin/dumpe2fs rPx,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/{m,}awk rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/cut rix,
/{usr/,}bin/date rix,
/{usr/,}bin/grep rix,
/{usr/,}bin/id rix,
/{usr/,}bin/mount rCx -> mount,
/{usr/,}bin/stat rix,
/var/lib/update-notifier/fsck-at-reboot rw,
@{PROC}/uptime r,
profile mount {
include <abstractions/base>
/{usr/,}bin/mount mr,
@{run}/mount/utab r,
@{sys}/devices/virtual/block/**/ r,
@{sys}/devices/virtual/block/**/autoclear r,
@{sys}/devices/virtual/block/**/backing_file r,
@{PROC}/@{pid}/mountinfo r,
}
include if exists <local/update-motd-fsck-at-reboot>
}