mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 16:03:51 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Calico profile cleanup.

Browse Source
This commit is contained in:
Jeroen Rijken 2022-07-09 20:53:21 +02:00
parent 2ffa3d1339
commit edcd130432
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
apparmor.d/groups/virt/calico
View File

@ -9,17 +9,18 @@ profile calico @{exec_path} flags=(complain) {
network inet,
network inet6,
@{exec_path} rix,
@{exec_path} rm,
@{exec_path}-ipam rix,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
/var/lib/calico/{,**} r,
/etc/cni/net.d/{,**} r,
/var/lib/calico/{,**} r,
/var/log/calico/cni/ r,
/var/log/calico/cni/cni.log rw,
@{run}/calico/ipam.lock rwk,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
include if exists <local/calico>
}