feat(abs): add bash-strict.

This commit is contained in:
Alexandre Pujol 2024-03-27 22:07:43 +00:00
parent bdb2b396b3
commit e77f8db40f
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
7 changed files with 8 additions and 8 deletions

View File

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{etc_ro}/gdm{3,}/Xsession
profile gdm-xsession @{exec_path} {
include <abstractions/base>
include <abstractions/bash>
include <abstractions/bash-strict>
include <abstractions/consoles>
include <abstractions/dconf-write>
include <abstractions/nameservice-strict>

View File

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{bin}/gnome-session
profile gnome-session @{exec_path} {
include <abstractions/base>
include <abstractions/bash>
include <abstractions/bash-strict>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/zsh>

View File

@ -11,7 +11,7 @@ include <tunables/global>
profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
include <abstractions/base>
include <abstractions/authentication>
include <abstractions/bash>
include <abstractions/bash-strict>
include <abstractions/bus-session>
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.login1>

View File

@ -12,7 +12,7 @@ profile sddm-xsession @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/bash>
include <abstractions/bash-strict>
include <abstractions/zsh>
@{exec_path} r,

View File

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{etc_ro}/X11/xdm/Xsession
profile xdm-xsession @{exec_path} {
include <abstractions/base>
include <abstractions/bash>
include <abstractions/bash-strict>
include <abstractions/dconf-write>
include <abstractions/nameservice-strict>
include <abstractions/X-strict>

View File

@ -10,7 +10,7 @@ include <tunables/global>
profile cockpit-session @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/authentication>
include <abstractions/bash>
include <abstractions/bash-strict>
include <abstractions/nameservice-strict>
include <abstractions/zsh>

View File

@ -18,7 +18,7 @@ include <tunables/global>
# of files.
profile default_user flags=(complain) {
include <abstractions/base>
include <abstractions/bash>
include <abstractions/bash-strict>
include <abstractions/consoles>
include <abstractions/nameservice>
@ -38,7 +38,7 @@ profile default_user flags=(complain) {
# anywhere, and execute from some places.
profile confined_user flags=(complain) {
include <abstractions/base>
include <abstractions/bash>
include <abstractions/bash-strict>
include <abstractions/consoles>
include <abstractions/nameservice>