mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-14 23:43:56 +01:00
Profile update.
This commit is contained in:
parent
faa3e70c8f
commit
a8d1205e76
@ -66,6 +66,8 @@ profile systemd-logind @{exec_path} flags=(complain) {
|
||||
/dev/dri/card[0-9]* rw,
|
||||
/dev/tty[0-9]* rw,
|
||||
/dev/nvme* r,
|
||||
/dev/shm/ r,
|
||||
/dev/mqueue/ r,
|
||||
|
||||
@{sys}/module/vt/parameters/default_utf8 r,
|
||||
@{sys}/fs/cgroup/memory/memory.limit_in_bytes r,
|
||||
|
@ -1,5 +1,6 @@
|
||||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2019-2021 Mikhail Morfikov
|
||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
@ -18,6 +19,7 @@ profile blkid @{exec_path} {
|
||||
|
||||
# The standard location of the cache file
|
||||
# Without owner here if this tool should be used as a regular user
|
||||
@{run}/blkid/ rw,
|
||||
@{run}/blkid/blkid.tab{,-*} rw,
|
||||
@{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab,
|
||||
# When the system doesn't have the /run/ dir, the cache file is placed under /etc/
|
||||
|
@ -49,6 +49,8 @@ profile git @{exec_path} {
|
||||
|
||||
/{usr/,}bin/{,ba,da}sh rix,
|
||||
/{usr/,}bin/{,e}grep rix,
|
||||
/{usr/,}bin/cat rix,
|
||||
/{usr/,}bin/dirname rix,
|
||||
|
||||
/{usr/,}bin/pager rPx -> child-pager,
|
||||
/{usr/,}bin/less rPx -> child-pager,
|
||||
|
Loading…
Reference in New Issue
Block a user