Update grc

- `mount` is too much, for now
- expanding `ro` paths
This commit is contained in:
nobodysu 2022-01-10 21:49:01 +00:00 committed by GitHub
parent 0fce337239
commit d6148c7b23
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -5,7 +5,7 @@ abi <abi/3.0>,
include <tunables/global>
@{GRC_PATHS_RO} = /etc @{HOME} /srv /tmp /var /usr/share /usr/lib/systemd
@{GRC_PATHS_RO} = /etc @{HOME} /srv /tmp /var /usr/{,local/}share /{,usr/}lib/systemd
@{exec_path} = /{,usr/}bin/grc
profile grc @{exec_path} {
@ -50,7 +50,6 @@ profile grc @{exec_path} {
/{,usr/}bin/ip rPx,
/{,usr/}bin/lsblk rPx,
/{,usr/}bin/diff rPx,
/{,usr/}bin/mount rPx,
/{,usr/}sbin/blkid rPx,
/usr/{{bin,sbin}/traceroute,bin/linux-traceroute,bin/traceroute.db} rPx,