mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profiles): disks access - add NBD devices.

Browse source
This commit is contained in:
Alexandre Pujol 2022-11-11 21:41:04 +00:00
parent 6916eefc1b
commit fd88162c55
Failed to generate hash of commit
2 changed files with 12 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/abstractions/disks-read
View file

@ -53,6 +53,11 @@
@{sys}/devices/virtual/block/zram[0-9]*/ r,
@{sys}/devices/virtual/block/zram[0-9]*/** r,
# NBD devices
/dev/nbd* rk,
@{sys}/devices/virtual/block/nbd[0-9]*/ r,
@{sys}/devices/virtual/block/nbd[0-9]*/** r,
# Armbian / DietPi
@{sys}/devices/platform/{soc,*.mmc}/**/block/mmcblk[0-9]*/{,mmcblk*/} r,
@{sys}/devices/platform/{soc,*.mmc}/**/block/mmcblk[0-9]*/{,mmcblk*/}hidden r,
@ -98,6 +103,7 @@
@{run}/udev/data/b11:[0-9]* r, # for /dev/sr*
@{run}/udev/data/b179:[0-9]* r, # for /dev/mmcblk*
@{run}/udev/data/b230:[0-9]* r, # for /dev/zvol*
@{run}/udev/data/b43:[0-9]* r, # for /dev/nbd*
@{run}/udev/data/b7:[0-9]* r, # for /dev/loop*
@{run}/udev/data/b8:[0-9]* r, # for /dev/sd*

6
apparmor.d/abstractions/disks-write
View file

@ -51,6 +51,11 @@
@{sys}/devices/virtual/block/zram[0-9]*/ r,
@{sys}/devices/virtual/block/zram[0-9]*/** r,
# NBD devices
/dev/nbd* rwk,
@{sys}/devices/virtual/block/nbd[0-9]*/ r,
@{sys}/devices/virtual/block/nbd[0-9]*/** r,
# Floppy disks
/dev/fd[0-9]* rwk,
@{sys}/devices/platform/floppy.[0-9]*/block/fd[0-9]/ r,
@ -78,6 +83,7 @@
@{run}/udev/data/b179:[0-9]* r, # for /dev/mmcblk*
@{run}/udev/data/b2:[0-9]* r, # for /dev/fd*
@{run}/udev/data/b230:[0-9]* r, # for /dev/zvol*
@{run}/udev/data/b43:[0-9]* r, # for /dev/nbd*
@{run}/udev/data/b7:[0-9]* r, # for /dev/loop*
@{run}/udev/data/b8:[0-9]* r, # for /dev/sd*