diff --git a/apparmor.d/profiles-a-l/kmod b/apparmor.d/profiles-a-l/kmod index 95bebd4b..f28fb05b 100644 --- a/apparmor.d/profiles-a-l/kmod +++ b/apparmor.d/profiles-a-l/kmod @@ -1,5 +1,6 @@ # apparmor.d - Full set of apparmor profiles # Copyright (C) 2019-2021 Mikhail Morfikov +# 2021 Alexandre Pujol # SPDX-License-Identifier: GPL-2.0-only abi , @@ -29,6 +30,7 @@ profile kmod @{exec_path} { /{usr/,}lib/modprobe.d/{,*.conf} r, /etc/modprobe.d/{,*.conf} r, + /etc/depmod.d/{,**} r, /{usr/,}lib/modules/*/modules.* rw, @@ -40,6 +42,9 @@ profile kmod @{exec_path} { @{PROC}/cmdline r, @{PROC}/modules r, + # Initframs + owner /tmp/mkinitcpio.*/{,**} rw, + # Needed for static-nodes #capability dac_override, #owner @{PROC}/@{pid}/fd/1 w,