mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-02-06 18:25:05 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(tunable): add new system_user variable.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-14 23:58:18 +00:00
parent e28e452ba4
commit e02bf03cca
Failed to generate hash of commit
2 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/tunables/multiarch.d/system
View file

@ -56,6 +56,7 @@
# Name of the systemd profile: unconfined || systemd # Name of the systemd profile: unconfined || systemd
@{systemd}=unconfined @{systemd}=unconfined
@{systemd_user}=unconfined
# Udev data dynamic assignment ranges # Udev data dynamic assignment ranges
@{dynamic}=23[4-9] 24[0-9] 25[0-4] # range 234 to 254 @{dynamic}=23[4-9] 24[0-9] 25[0-4] # range 234 to 254

1
pkg/prebuild/prepare.go
View file

@ -206,6 +206,7 @@ func SetFullSystemPolicy() ([]string, error) {
return res, err return res, err
} }
out := strings.Replace(string(content), "@{systemd}=unconfined", "@{systemd}=systemd", -1) out := strings.Replace(string(content), "@{systemd}=unconfined", "@{systemd}=systemd", -1)
out = strings.Replace(out, "@{systemd_user}=unconfined", "@{systemd_user}=systemd-user", -1)
if err := path.WriteFile([]byte(out)); err != nil { if err := path.WriteFile([]byte(out)); err != nil {
return res, err return res, err
} }