mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
Profile update.
This commit is contained in:
parent
faa3e70c8f
commit
a8d1205e76
@ -66,6 +66,8 @@ profile systemd-logind @{exec_path} flags=(complain) {
|
|||||||
/dev/dri/card[0-9]* rw,
|
/dev/dri/card[0-9]* rw,
|
||||||
/dev/tty[0-9]* rw,
|
/dev/tty[0-9]* rw,
|
||||||
/dev/nvme* r,
|
/dev/nvme* r,
|
||||||
|
/dev/shm/ r,
|
||||||
|
/dev/mqueue/ r,
|
||||||
|
|
||||||
@{sys}/module/vt/parameters/default_utf8 r,
|
@{sys}/module/vt/parameters/default_utf8 r,
|
||||||
@{sys}/fs/cgroup/memory/memory.limit_in_bytes r,
|
@{sys}/fs/cgroup/memory/memory.limit_in_bytes r,
|
||||||
|
@ -1,5 +1,6 @@
|
|||||||
# apparmor.d - Full set of apparmor profiles
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# Copyright (C) 2019-2021 Mikhail Morfikov
|
# Copyright (C) 2019-2021 Mikhail Morfikov
|
||||||
|
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
abi <abi/3.0>,
|
abi <abi/3.0>,
|
||||||
@ -18,6 +19,7 @@ profile blkid @{exec_path} {
|
|||||||
|
|
||||||
# The standard location of the cache file
|
# The standard location of the cache file
|
||||||
# Without owner here if this tool should be used as a regular user
|
# Without owner here if this tool should be used as a regular user
|
||||||
|
@{run}/blkid/ rw,
|
||||||
@{run}/blkid/blkid.tab{,-*} rw,
|
@{run}/blkid/blkid.tab{,-*} rw,
|
||||||
@{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab,
|
@{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab,
|
||||||
# When the system doesn't have the /run/ dir, the cache file is placed under /etc/
|
# When the system doesn't have the /run/ dir, the cache file is placed under /etc/
|
||||||
|
@ -49,6 +49,8 @@ profile git @{exec_path} {
|
|||||||
|
|
||||||
/{usr/,}bin/{,ba,da}sh rix,
|
/{usr/,}bin/{,ba,da}sh rix,
|
||||||
/{usr/,}bin/{,e}grep rix,
|
/{usr/,}bin/{,e}grep rix,
|
||||||
|
/{usr/,}bin/cat rix,
|
||||||
|
/{usr/,}bin/dirname rix,
|
||||||
|
|
||||||
/{usr/,}bin/pager rPx -> child-pager,
|
/{usr/,}bin/pager rPx -> child-pager,
|
||||||
/{usr/,}bin/less rPx -> child-pager,
|
/{usr/,}bin/less rPx -> child-pager,
|
||||||
|
Loading…
Reference in New Issue
Block a user