diff --git a/apparmor.d/profiles-a-l/auditd b/apparmor.d/profiles-a-l/auditd new file mode 100644 index 00000000..6044e157 --- /dev/null +++ b/apparmor.d/profiles-a-l/auditd @@ -0,0 +1,27 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}bin/auditd +profile auditd @{exec_path} { + include + include + + capability fsetid, + capability chown, + + network netlink raw, + + @{exec_path} mr, + + /var/log/audit/audit.log rw, + /var/log/audit/audit.log.[0-9] rw, + + @{run}/systemd/userdb/ r, + + include if exists +}