feat(profile): move gcr tools.

This commit is contained in:
Alexandre Pujol 2024-03-15 16:18:44 +00:00
parent a66ff700a2
commit dd1b3b16e2
Failed to generate hash of commit
2 changed files with 19 additions and 1 deletions

View file

@ -0,0 +1,18 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/gcr-prompter
profile gcr-prompter @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
owner @{HOME}/@{XDG_SSH_DIR}/ r,
include if exists <local/gcr-prompter>
}

View file

@ -15,7 +15,7 @@ profile gcr-ssh-agent @{exec_path} {
@{bin}/ssh-agent rPx,
@{bin}/ssh-add rix,
owner @{HOME}/@{XDG_SSH_DIR}/* r,
owner @{HOME}/@{XDG_SSH_DIR}/{,*} r,
owner @{run}/user/@{uid}/ssh-askpass.@{rand6}/{,*} rw,