mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-18 08:58:15 +01:00
Add mkinitcpio support.
This commit is contained in:
parent
a0d634b48f
commit
ec2e1fc1c2
1 changed files with 5 additions and 0 deletions
|
@ -1,5 +1,6 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2019-2021 Mikhail Morfikov
|
||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
|
@ -29,6 +30,7 @@ profile kmod @{exec_path} {
|
|||
|
||||
/{usr/,}lib/modprobe.d/{,*.conf} r,
|
||||
/etc/modprobe.d/{,*.conf} r,
|
||||
/etc/depmod.d/{,**} r,
|
||||
|
||||
/{usr/,}lib/modules/*/modules.* rw,
|
||||
|
||||
|
@ -40,6 +42,9 @@ profile kmod @{exec_path} {
|
|||
@{PROC}/cmdline r,
|
||||
@{PROC}/modules r,
|
||||
|
||||
# Initframs
|
||||
owner /tmp/mkinitcpio.*/{,**} rw,
|
||||
|
||||
# Needed for static-nodes
|
||||
#capability dac_override,
|
||||
#owner @{PROC}/@{pid}/fd/1 w,
|
||||
|
|
Loading…
Reference in a new issue