mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-12-24 14:06:47 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

update apparmor profiles

Browse source
This commit is contained in:
Mikhail Morfikov 2020-09-12 17:46:51 +02:00
parent 030d7a4a53
commit d1605c62b3
Failed to generate hash of commit
6 changed files with 11 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/atom
View file

@ -184,7 +184,7 @@ profile atom @{exec_path} {
# file_inherit # file_inherit
owner @{HOME}/.xsession-errors w, owner @{HOME}/.xsession-errors w,
/usr/share/atom/** r, /usr/share/atom/** r,
} }

2
apparmor.d/dpkg
View file

@ -120,7 +120,7 @@ profile dpkg @{exec_path} {
/{usr/,}bin/more mr, /{usr/,}bin/more mr,
/{usr/,}bin/diff mr, /{usr/,}bin/diff mr,
owner @{HOME}/.lesshst r, owner @{HOME}/.lesshs* rw,
# Diff changed config files # Diff changed config files
/etc/** r, /etc/** r,

1
apparmor.d/mkinitramfs
View file

@ -47,6 +47,7 @@ profile mkinitramfs @{exec_path} {
/{usr/,}bin/cpio rix, /{usr/,}bin/cpio rix,
/{usr/,}bin/env rix, /{usr/,}bin/env rix,
/{usr/,}bin/rmdir rix, /{usr/,}bin/rmdir rix,
/{usr/,}bin/tr rix,
/{usr/,}bin/ldd rCx -> ldd, /{usr/,}bin/ldd rCx -> ldd,
/{usr/,}sbin/ldconfig rCx -> ldconfig, /{usr/,}sbin/ldconfig rCx -> ldconfig,

2
apparmor.d/openbox
View file

@ -80,7 +80,7 @@ profile openbox @{exec_path} {
# file_inherit # file_inherit
owner @{HOME}/.xsession-errors w, owner @{HOME}/.xsession-errors w,
owner /dev/tty[0-9]* rw, owner /dev/tty[0-9]* rw,
#include if exists <local/openbox_autostart> #include if exists <local/openbox_autostart>
} }

3
apparmor.d/runuser
View file

@ -48,5 +48,8 @@ profile runuser @{exec_path} {
/etc/default/runuser r, /etc/default/runuser r,
# file_inherit
owner /tmp/debian-security-support.postinst.*/output w,
#include if exists <local/runuser> #include if exists <local/runuser>
} }

4
apparmor.d/usr.bin.man
View file

@ -81,6 +81,10 @@ profile man_groff {
signal peer=/usr/bin/man, signal peer=/usr/bin/man,
# @{profile_name} doesn't seem to work here. # @{profile_name} doesn't seem to work here.
signal peer=/usr/bin/man//&man_groff, signal peer=/usr/bin/man//&man_groff,
# file_inherit
owner /tmp/* rw,
} }
profile man_filter { profile man_filter {