diff --git a/apparmor.d/groups/network/nmcli b/apparmor.d/groups/network/nmcli new file mode 100644 index 00000000..d86dec49 --- /dev/null +++ b/apparmor.d/groups/network/nmcli @@ -0,0 +1,38 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2022 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/nmcli +profile nmcli @{exec_path} { + include + + capability dac_read_search, + capability sys_nice, + + @{exec_path} mr, + + /{usr/,}bin/less rCx -> pager, + + @{run}/udev/data/+pci* r, + @{run}/udev/data/n[0-9]* r, + + @{sys}/devices/virtual/net/{,**} r, + @{sys}/devices/pci[0-9]*/**/net/*/{,**} r, + + profile pager { + include + include + + /{usr/,}bin/less mr, + + owner @{HOME}/.lesshs* rw, + owner @{user_cache_dirs}/.lesshs* rw, + + } + + include if exists +} \ No newline at end of file diff --git a/dists/flags/main.flags b/dists/flags/main.flags index 57a3e8e4..e50ce3a9 100644 --- a/dists/flags/main.flags +++ b/dists/flags/main.flags @@ -120,6 +120,7 @@ needrestart-iucode-scan-versions complain networkd-dispatcher complain nft complain nmap complain +nmcli complain nullmailer-send complain packagekitd attach_disconnected,complain pass complain