Profile update.

This commit is contained in:
Alexandre Pujol 2021-05-09 00:33:10 +01:00
parent faa3e70c8f
commit a8d1205e76
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
3 changed files with 6 additions and 0 deletions

View File

@ -66,6 +66,8 @@ profile systemd-logind @{exec_path} flags=(complain) {
/dev/dri/card[0-9]* rw, /dev/dri/card[0-9]* rw,
/dev/tty[0-9]* rw, /dev/tty[0-9]* rw,
/dev/nvme* r, /dev/nvme* r,
/dev/shm/ r,
/dev/mqueue/ r,
@{sys}/module/vt/parameters/default_utf8 r, @{sys}/module/vt/parameters/default_utf8 r,
@{sys}/fs/cgroup/memory/memory.limit_in_bytes r, @{sys}/fs/cgroup/memory/memory.limit_in_bytes r,

View File

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov # Copyright (C) 2019-2021 Mikhail Morfikov
# 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>, abi <abi/3.0>,
@ -18,6 +19,7 @@ profile blkid @{exec_path} {
# The standard location of the cache file # The standard location of the cache file
# Without owner here if this tool should be used as a regular user # Without owner here if this tool should be used as a regular user
@{run}/blkid/ rw,
@{run}/blkid/blkid.tab{,-*} rw, @{run}/blkid/blkid.tab{,-*} rw,
@{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab, @{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab,
# When the system doesn't have the /run/ dir, the cache file is placed under /etc/ # When the system doesn't have the /run/ dir, the cache file is placed under /etc/

View File

@ -49,6 +49,8 @@ profile git @{exec_path} {
/{usr/,}bin/{,ba,da}sh rix, /{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/{,e}grep rix, /{usr/,}bin/{,e}grep rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/dirname rix,
/{usr/,}bin/pager rPx -> child-pager, /{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager, /{usr/,}bin/less rPx -> child-pager,