mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-31 07:17:22 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Review points

Browse source 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
This commit is contained in:
Jeroen Rijken 2024-03-02 17:04:33 +01:00 committed by Alex
parent 346285720d
commit ba6172bb8c
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/virt/libvirtd
View file

@ -178,7 +178,7 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/c21:@{int} r, # Generic SCSI access @{run}/udev/data/c21:@{int} r, # Generic SCSI access
@{run}/udev/data/c29:@{int} r, # For /dev/fb[0-9]* @{run}/udev/data/c29:@{int} r, # For /dev/fb[0-9]*
@{run}/udev/data/c81:@{int} r, # For video4linux @{run}/udev/data/c81:@{int} r, # For video4linux
@{run}/udev/data/c89:@{int} r, # ? @{run}/udev/data/c89:@{int} r, # For I2C bus interface
@{run}/udev/data/c90:@{int} r, # For RAM, ROM, Flash @{run}/udev/data/c90:@{int} r, # For RAM, ROM, Flash
@{run}/udev/data/c99:@{int} r, # For raw parallel ports /dev/parport* @{run}/udev/data/c99:@{int} r, # For raw parallel ports /dev/parport*
@{run}/udev/data/c108:@{int} r, # For /dev/ppp @{run}/udev/data/c108:@{int} r, # For /dev/ppp

2
apparmor.d/profiles-a-f/boltd
View file

@ -43,7 +43,7 @@ profile boltd @{exec_path} flags=(attach_disconnected) {
@{sys}/bus/wmi/devices/ r, @{sys}/bus/wmi/devices/ r,
@{sys}/class/ r, @{sys}/class/ r,
@{sys}/devices/@{pci}/device r, @{sys}/devices/@{pci}/device r,
@{sys}/devices/@{pci}/domain[0-9]*/boot_acl rw, @{sys}/devices/@{pci}/domain@{int}/boot_acl rw,
@{sys}/devices/@{pci}/domain@{int}/{security,uevent} r, @{sys}/devices/@{pci}/domain@{int}/{security,uevent} r,
@{sys}/devices/@{pci}/domain@{int}/**/ r, @{sys}/devices/@{pci}/domain@{int}/**/ r,
@{sys}/devices/@{pci}/domain@{int}/**/{authorized,generation} r, @{sys}/devices/@{pci}/domain@{int}/**/{authorized,generation} r,