mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profiles): add iwd.

Browse Source
This commit is contained in:
Alexandre Pujol 2022-10-06 21:13:05 +01:00
parent f3e2ebfffa
commit e226f4eb03
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
2 changed files with 44 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
apparmor.d/groups/network/iwd Normal file
View File

@ -0,0 +1,43 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/iwd/iwd
profile iwd @{exec_path} {
include <abstractions/base>
capability net_admin,
capability net_raw,
capability net_bind_service,
network inet dgram,
network inet6 dgram,
network inet stream,
network inet6 stream,
network netlink raw,
network netlink dgram,
network alg seqpacket,
@{exec_path} mr,
/etc/iwd/{,**} r,
/var/lib/iwd/{,**} rw,
@{sys}/devices/pci[0-9]*/**/ieee80211/phy[0-9]/* r,
@{sys}/devices/pci[0-9]*/**/modalias r,
@{PROC}/sys/net/ipv{4,6}/conf/wlan[0-9]*/arp_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan[0-9]*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan[0-9]*/ndisc_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/arp_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/ndisc_* rw,
/dev/rfkill rw,
include if exists <local/iwd>
}

1
dists/flags/main.flags
View File

@ -89,6 +89,7 @@ ibus-memconf complain
im-launch complain im-launch complain
install-info complain install-info complain
irqbalance complain irqbalance complain
iwd complain
kernel-install complain kernel-install complain
kmod attach_disconnected,complain kmod attach_disconnected,complain
last complain last complain