mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-08 18:31:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/profiles/apparmor.d/abstractions/gnupg

17 lines
459 B
Text
Raw Normal View History

some new abstractions from Mathias Gug
2007-08-27 23:49:51 +00:00
# vim:syntax=apparmor
# gnupg sub-process running permissions
policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>
2020-05-05 00:08:39 -07:00
abi <abi/3.0>,
some new abstractions from Mathias Gug
2007-08-27 23:49:51 +00:00
# user configurations
Subject: profiles - owner usage for @{HOME} rules From: Simon Deziel <simon.deziel@gmail.com> A fair number of the rules that apply to files in @{HOME} predate the existence of the 'owner' qualifier. This patch adds the 'owner' qualifier in several places. Acked-by: Steve Beattie <sbeattie@ubuntu.com>
2013-01-04 22:05:53 -08:00
owner @{HOME}/.gnupg/options r,
owner @{HOME}/.gnupg/pubring.gpg r,
abstractions/gnupg: allow pubring.kbx
2018-01-20 23:54:08 +01:00
owner @{HOME}/.gnupg/pubring.kbx r,
Subject: profiles - owner usage for @{HOME} rules From: Simon Deziel <simon.deziel@gmail.com> A fair number of the rules that apply to files in @{HOME} predate the existence of the 'owner' qualifier. This patch adds the 'owner' qualifier in several places. Acked-by: Steve Beattie <sbeattie@ubuntu.com>
2013-01-04 22:05:53 -08:00
owner @{HOME}/.gnupg/random_seed rw,
owner @{HOME}/.gnupg/secring.gpg r,
owner @{HOME}/.gnupg/so/*.x86_64 mr,
owner @{HOME}/.gnupg/trustdb.gpg rw,
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com>
2019-01-24 03:03:11 -08:00
# Include additions to the abstraction
abstractions: remove '#' from 'include if exists' This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'.
2020-05-30 19:46:08 +02:00
include if exists <abstractions/gnupg.d>
Reference in a new issue Copy permalink