mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profiles): restrict path access in pacman.

Browse source
This commit is contained in:
Alexandre Pujol 2022-10-06 20:50:41 +01:00
parent ece6524886
commit e4e54a26ef
Failed to generate hash of commit
1 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/groups/pacman/pacman
View file

@ -104,13 +104,13 @@ profile pacman @{exec_path} {
# Install/update packages
/ r,
/*/ rwl,
/boot/{,**} rwl,
/etc/{,**} rwl,
/opt/{,**} rwl,
/srv/{,**} rwl,
/usr/{,**} rwlk,
/var/{,**} rwlk,
/*/ rw,
/boot/** rwl -> /boot/**,
/etc/** rwl -> /etc/**,
/opt/** rwl -> /opt/**,
/srv/** rwl -> /srv/**,
/usr/** rwlk -> /usr/**,
/var/** rwlk -> /var/**,
@{PROC}/ r,
@{run}/ r,