2018-09-26 22:09:17 +02:00
|
|
|
abi <abi/4.19> ,
|
|
|
|
|
2018-05-06 19:35:22 +02:00
|
|
|
alias /foo -> /bar,
|
|
|
|
|
2018-05-31 21:57:13 +02:00
|
|
|
@{asdf} = "" foo
|
|
|
|
@{xy} = x y
|
|
|
|
|
2013-09-22 15:01:34 +05:30
|
|
|
#include <tunables/global>
|
|
|
|
|
|
|
|
# A simple test comment which will persist
|
|
|
|
|
|
|
|
|
|
|
|
/usr/bin/a/simple/cleanprof/test/profile {
|
2018-09-26 22:09:17 +02:00
|
|
|
abi "abi/4.20" ,
|
|
|
|
|
2013-09-22 15:08:30 +05:30
|
|
|
#include <abstractions/base>
|
|
|
|
|
2016-02-21 21:34:31 +01:00
|
|
|
set rlimit nofile <= 256,
|
|
|
|
|
|
|
|
audit capability,
|
|
|
|
|
|
|
|
network stream,
|
|
|
|
|
2016-05-23 23:21:13 +02:00
|
|
|
dbus send bus=session,
|
|
|
|
|
2018-05-09 21:57:37 +02:00
|
|
|
mount options=(rw,suid) /c -> /3,
|
|
|
|
|
2016-02-21 21:34:31 +01:00
|
|
|
signal set=(abrt alrm bus chld fpe hup ill int kill pipe quit segv stkflt term trap usr1 usr2),
|
|
|
|
|
2018-05-09 21:57:37 +02:00
|
|
|
pivot_root oldroot=/mnt/root/old/,
|
|
|
|
|
2015-12-17 23:47:08 +01:00
|
|
|
unix (receive) type=dgram,
|
2018-05-09 21:57:37 +02:00
|
|
|
unix shutdown addr=@HypotheticalServiceDaemon,
|
2015-12-17 23:47:08 +01:00
|
|
|
|
2018-05-06 14:51:19 +02:00
|
|
|
link subset /alpha/beta -> /tmp/**,
|
|
|
|
|
2016-10-01 19:54:48 +02:00
|
|
|
allow /home/*/** r,
|
|
|
|
allow /home/foo/** w,
|
2013-09-22 15:01:34 +05:30
|
|
|
|
2016-02-21 21:34:31 +01:00
|
|
|
change_profile,
|
|
|
|
|
2015-06-19 21:25:39 +02:00
|
|
|
|
|
|
|
^foo {
|
|
|
|
capability dac_override,
|
|
|
|
|
|
|
|
/etc/fstab r,
|
|
|
|
|
|
|
|
}
|
2013-09-22 15:01:34 +05:30
|
|
|
}
|
|
|
|
/usr/bin/other/cleanprof/test/profile {
|
2016-10-01 19:54:48 +02:00
|
|
|
allow /home/*/** rw,
|
|
|
|
allow /home/foo/bar r,
|
2013-09-22 15:01:34 +05:30
|
|
|
|
|
|
|
}
|
2018-12-09 20:54:41 +01:00
|
|
|
/what/ever/xattr xattrs=( foo=bar ) flags=( complain ) {
|
|
|
|
/what/ever r,
|
|
|
|
|
|
|
|
}
|