mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-14 23:43:56 +01:00
Update grc
- `mount` is too much, for now - expanding `ro` paths
This commit is contained in:
parent
0fce337239
commit
d6148c7b23
@ -5,7 +5,7 @@ abi <abi/3.0>,
|
||||
|
||||
include <tunables/global>
|
||||
|
||||
@{GRC_PATHS_RO} = /etc @{HOME} /srv /tmp /var /usr/share /usr/lib/systemd
|
||||
@{GRC_PATHS_RO} = /etc @{HOME} /srv /tmp /var /usr/{,local/}share /{,usr/}lib/systemd
|
||||
|
||||
@{exec_path} = /{,usr/}bin/grc
|
||||
profile grc @{exec_path} {
|
||||
@ -50,7 +50,6 @@ profile grc @{exec_path} {
|
||||
/{,usr/}bin/ip rPx,
|
||||
/{,usr/}bin/lsblk rPx,
|
||||
/{,usr/}bin/diff rPx,
|
||||
/{,usr/}bin/mount rPx,
|
||||
/{,usr/}sbin/blkid rPx,
|
||||
/usr/{{bin,sbin}/traceroute,bin/linux-traceroute,bin/traceroute.db} rPx,
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user