Remove complain flags

This commit is contained in:
Jeroen Rijken 2022-07-23 15:41:40 +02:00 committed by Alex
parent e724d835ed
commit fcea04c69b
7 changed files with 7 additions and 7 deletions

View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{s,}bin/xtables-nft-multi
profile cni-xtables-nft flags=(complain) {
profile cni-xtables-nft {
include <abstractions/base>
include <abstractions/nameservice-strict>

View file

@ -8,7 +8,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/containerd-shim-runc-v2
profile containerd-shim-runc-v2 @{exec_path} flags=(complain,attach_disconnected) {
profile containerd-shim-runc-v2 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>

View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{local/,}bin/k3s
profile k3s @{exec_path} flags=(complain) {
profile k3s @{exec_path} {
include <abstractions/base>
include <abstractions/disks-read>
include <abstractions/nameservice-strict>

View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /pause
profile kubernetes-pause @{exec_path} flags=(complain,attach_disconnected) {
profile kubernetes-pause @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
signal (receive) set=kill,

View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{local/,}{s,}bin/zed
profile zed @{exec_path} flags=(complain) {
profile zed @{exec_path} {
include <abstractions/base>
include <abstractions/disks-read>

View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{local/,}{s,}bin/zfs
profile zfs @{exec_path} flags=(complain) {
profile zfs @{exec_path} {
include <abstractions/base>
capability sys_admin,

View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{local/,}{s,}bin/zpool
profile zpool @{exec_path} flags=(complain) {
profile zpool @{exec_path} {
include <abstractions/base>
include <abstractions/disks-read>