mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profiles): networkmanager: compatibility with some distribution

Browse source 
Co-authored-by: Andy Ramos <maplewood_broer@8shield.net>
This commit is contained in:
Alexandre Pujol 2023-02-08 16:36:24 +00:00
parent 6665e3861f
commit b4a09ab13a
Failed to generate hash of commit
8 changed files with 20 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
apparmor.d/groups/network/NetworkManager
View file

@ -89,17 +89,17 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/{,ba,da}sh rix, /{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/dnsmasq rPx, /{usr/,}bin/dnsmasq rPx,
/{usr/,}bin/resolvconf rPx, /{usr/,}bin/resolvconf rPx,
/{usr/,}bin/systemctl rPx -> child-systemctl, /{usr/,}bin/systemctl rPx -> child-systemctl,
@{libexec}/nm-dhcp-helper rPx, @{libexec}/{,NetworkManager/}nm-dhcp-helper rPx,
@{libexec}/nm-dispatcher rPx, @{libexec}/{,NetworkManager/}nm-dispatcher rPx,
@{libexec}/nm-iface-helper rPx, @{libexec}/{,NetworkManager/}nm-iface-helper rPx,
@{libexec}/nm-initrd-generator rPx, @{libexec}/{,NetworkManager/}nm-initrd-generator rPx,
@{libexec}/nm-openvpn-auth-dialog rPx, @{libexec}/{,NetworkManager/}nm-openvpn-auth-dialog rPx,
@{libexec}/nm-openvpn-service rPx, @{libexec}/{,NetworkManager/}nm-openvpn-service rPx,
@{libexec}/nm-openvpn-service-openvpn-helper rPx, @{libexec}/{,NetworkManager/}nm-openvpn-service-openvpn-helper rPx,
@{libexec}/nm-daemon-helper rPx, @{libexec}/{,NetworkManager/}nm-daemon-helper rPx,
/usr/share/gvfs/remote-volume-monitors/{,*.monitor} r, /usr/share/gvfs/remote-volume-monitors/{,*.monitor} r,

2
apparmor.d/groups/network/nm-daemon-helper
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{libexec}/nm-daemon-helper @{exec_path} = @{libexec}/{,NetworkManager/}nm-daemon-helper
profile nm-daemon-helper @{exec_path} { profile nm-daemon-helper @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>

2
apparmor.d/groups/network/nm-dhcp-helper
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{libexec}/nm-dhcp-helper @{exec_path} = @{libexec}/{,NetworkManager/}nm-dhcp-helper
profile nm-dhcp-helper @{exec_path} { profile nm-dhcp-helper @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/dbus> include <abstractions/dbus>

2
apparmor.d/groups/network/nm-iface-helper
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{libexec}/nm-iface-helper @{exec_path} = @{libexec}/{,NetworkManager/}nm-iface-helper
profile nm-iface-helper @{exec_path} { profile nm-iface-helper @{exec_path} {
include <abstractions/base> include <abstractions/base>

2
apparmor.d/groups/network/nm-initrd-generator
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{libexec}/nm-initrd-generator @{exec_path} = @{libexec}/{,NetworkManager/}nm-initrd-generator
profile nm-initrd-generator @{exec_path} { profile nm-initrd-generator @{exec_path} {
include <abstractions/base> include <abstractions/base>

2
apparmor.d/groups/network/nm-openvpn-auth-dialog
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{libexec}/nm-openvpn-auth-dialog @{exec_path} = @{libexec}/{,NetworkManager/}nm-openvpn-auth-dialog
profile nm-openvpn-auth-dialog @{exec_path} { profile nm-openvpn-auth-dialog @{exec_path} {
include <abstractions/base> include <abstractions/base>

6
apparmor.d/groups/network/nm-openvpn-service
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{libexec}/nm-openvpn-service @{exec_path} = @{libexec}/{,NetworkManager/}nm-openvpn-service
profile nm-openvpn-service @{exec_path} { profile nm-openvpn-service @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
@ -18,8 +18,8 @@ profile nm-openvpn-service @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
@{libexec}/nm-openvpn-auth-dialog rPx, @{libexec}/{,NetworkManager/}nm-openvpn-auth-dialog rPx,
@{libexec}/nm-openvpn-service-openvpn-helper rPx, @{libexec}/{,NetworkManager/}nm-openvpn-service-openvpn-helper rPx,
/{usr/,}{s,}bin/openvpn rPx, /{usr/,}{s,}bin/openvpn rPx,
/{usr/,}bin/{,ba,da}sh rix, /{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/kmod rPx, /{usr/,}bin/kmod rPx,

2
apparmor.d/groups/network/nm-openvpn-service-openvpn-helper
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{libexec}/nm-openvpn-service-openvpn-helper @{exec_path} = @{libexec}/{,NetworkManager/}nm-openvpn-service-openvpn-helper
profile nm-openvpn-service-openvpn-helper @{exec_path} { profile nm-openvpn-service-openvpn-helper @{exec_path} {
include <abstractions/base> include <abstractions/base>