mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-29 22:35:15 +01:00
feat(profile): add udev child & low-memory profiles.
This commit is contained in:
parent
cdfa76924b
commit
fade97486d
3 changed files with 46 additions and 0 deletions
20
apparmor.d/profiles-g-l/low-memory-monitor
Normal file
20
apparmor.d/profiles-g-l/low-memory-monitor
Normal file
|
@ -0,0 +1,20 @@
|
||||||
|
# apparmor.d - Full set of apparmor profiles
|
||||||
|
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
|
||||||
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
|
abi <abi/3.0>,
|
||||||
|
|
||||||
|
include <tunables/global>
|
||||||
|
|
||||||
|
@{exec_path} = @{lib}/low-memory-monitor
|
||||||
|
profile low-memory-monitor @{exec_path} flags=(attach_disconnected) {
|
||||||
|
include <abstractions/base>
|
||||||
|
|
||||||
|
capability ipc_lock,
|
||||||
|
|
||||||
|
@{exec_path} mr,
|
||||||
|
|
||||||
|
owner @{PROC}/pressure/memory rw,
|
||||||
|
|
||||||
|
include if exists <local/low-memory-monitor>
|
||||||
|
}
|
21
apparmor.d/profiles-s-z/udev-dmi-memory-id
Normal file
21
apparmor.d/profiles-s-z/udev-dmi-memory-id
Normal file
|
@ -0,0 +1,21 @@
|
||||||
|
# apparmor.d - Full set of apparmor profiles
|
||||||
|
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
|
||||||
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
|
abi <abi/3.0>,
|
||||||
|
|
||||||
|
include <tunables/global>
|
||||||
|
|
||||||
|
@{exec_path} = @{lib}/udev/dmi_memory_id
|
||||||
|
profile udev-dmi-memory-id @{exec_path} {
|
||||||
|
include <abstractions/base>
|
||||||
|
|
||||||
|
@{exec_path} mr,
|
||||||
|
|
||||||
|
/etc/udev/udev.conf r,
|
||||||
|
|
||||||
|
@{sys}/firmware/dmi/tables/DMI r,
|
||||||
|
@{sys}/firmware/dmi/tables/smbios_entry_point r,
|
||||||
|
|
||||||
|
include if exists <local/udev-dmi-memory-id>
|
||||||
|
}
|
|
@ -128,6 +128,7 @@ gnome-disk-image-mounter complain
|
||||||
gnome-disks complain
|
gnome-disks complain
|
||||||
gnome-extension-gsconnect complain
|
gnome-extension-gsconnect complain
|
||||||
gnome-extension-manager complain
|
gnome-extension-manager complain
|
||||||
|
gnome-initial-setup complain
|
||||||
gnome-music complain
|
gnome-music complain
|
||||||
gnome-photos-thumbnailer complain
|
gnome-photos-thumbnailer complain
|
||||||
gnome-remote-desktop-daemon complain
|
gnome-remote-desktop-daemon complain
|
||||||
|
@ -173,6 +174,7 @@ hostnamectl complain
|
||||||
ibus-engine-table complain
|
ibus-engine-table complain
|
||||||
ibus-memconf complain
|
ibus-memconf complain
|
||||||
im-launch complain
|
im-launch complain
|
||||||
|
init-exim4 complain
|
||||||
install-info complain
|
install-info complain
|
||||||
irqbalance attach_disconnected,complain
|
irqbalance attach_disconnected,complain
|
||||||
iwctl complain
|
iwctl complain
|
||||||
|
@ -215,6 +217,7 @@ locale-gen complain
|
||||||
localectl complain
|
localectl complain
|
||||||
login attach_disconnected,complain
|
login attach_disconnected,complain
|
||||||
loginctl complain
|
loginctl complain
|
||||||
|
low-memory-monitor attach_disconnected,complain
|
||||||
lvm attach_disconnected,complain
|
lvm attach_disconnected,complain
|
||||||
lvmconfig complain
|
lvmconfig complain
|
||||||
lvmdump complain
|
lvmdump complain
|
||||||
|
@ -242,6 +245,7 @@ org.gnome.NautilusPreviewer complain
|
||||||
os-prober attach_disconnected,complain
|
os-prober attach_disconnected,complain
|
||||||
package-data-downloader complain
|
package-data-downloader complain
|
||||||
packagekitd attach_disconnected,complain
|
packagekitd attach_disconnected,complain
|
||||||
|
pam_kwallet_init complain
|
||||||
pass-import complain
|
pass-import complain
|
||||||
passim complain
|
passim complain
|
||||||
passimd attach_disconnected,complain
|
passimd attach_disconnected,complain
|
||||||
|
@ -361,6 +365,7 @@ thunderbird complain
|
||||||
thunderbird-glxtest complain
|
thunderbird-glxtest complain
|
||||||
thunderbird-vaapitest complain
|
thunderbird-vaapitest complain
|
||||||
transmission-gtk complain
|
transmission-gtk complain
|
||||||
|
udev-dmi-memory-id complain
|
||||||
udisksctl complain
|
udisksctl complain
|
||||||
udisksd attach_disconnected,complain
|
udisksd attach_disconnected,complain
|
||||||
umount complain
|
umount complain
|
||||||
|
|
Loading…
Reference in a new issue