mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 16:03:51 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Calico profile cleanup.

Browse Source
This commit is contained in:
Jeroen Rijken 2022-07-09 20:53:21 +02:00
parent 2ffa3d1339
commit edcd130432
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
apparmor.d/groups/virt/calico
View File

@ -9,17 +9,18 @@ profile calico @{exec_path} flags=(complain) {
network inet, network inet,
network inet6, network inet6,
@{exec_path} rix, @{exec_path} rm,
@{exec_path}-ipam rix, @{exec_path}-ipam rix,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
/var/lib/calico/{,**} r,
/etc/cni/net.d/{,**} r, /etc/cni/net.d/{,**} r,
/var/lib/calico/{,**} r,
/var/log/calico/cni/ r, /var/log/calico/cni/ r,
/var/log/calico/cni/cni.log rw, /var/log/calico/cni/cni.log rw,
@{run}/calico/ipam.lock rwk, @{run}/calico/ipam.lock rwk,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
include if exists <local/calico> include if exists <local/calico>
} }