mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
feat(abs): add bash-strict.
This commit is contained in:
parent
bdb2b396b3
commit
e77f8db40f
@ -9,7 +9,7 @@ include <tunables/global>
|
||||
@{exec_path} = @{etc_ro}/gdm{3,}/Xsession
|
||||
profile gdm-xsession @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/dconf-write>
|
||||
include <abstractions/nameservice-strict>
|
||||
|
@ -9,7 +9,7 @@ include <tunables/global>
|
||||
@{exec_path} = @{bin}/gnome-session
|
||||
profile gnome-session @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/zsh>
|
||||
|
@ -11,7 +11,7 @@ include <tunables/global>
|
||||
profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/authentication>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/bus-session>
|
||||
include <abstractions/bus-system>
|
||||
include <abstractions/bus/org.freedesktop.login1>
|
||||
|
@ -12,7 +12,7 @@ profile sddm-xsession @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/zsh>
|
||||
|
||||
@{exec_path} r,
|
||||
|
@ -9,7 +9,7 @@ include <tunables/global>
|
||||
@{exec_path} = @{etc_ro}/X11/xdm/Xsession
|
||||
profile xdm-xsession @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/dconf-write>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/X-strict>
|
||||
|
@ -10,7 +10,7 @@ include <tunables/global>
|
||||
profile cockpit-session @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/authentication>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/zsh>
|
||||
|
||||
|
@ -18,7 +18,7 @@ include <tunables/global>
|
||||
# of files.
|
||||
profile default_user flags=(complain) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice>
|
||||
|
||||
@ -38,7 +38,7 @@ profile default_user flags=(complain) {
|
||||
# anywhere, and execute from some places.
|
||||
profile confined_user flags=(complain) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bash>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice>
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user