mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
apply suggestions from @georgiag
This commit is contained in:
parent
b496786a18
commit
06dbaca1c8
1 changed files with 2 additions and 2 deletions
|
@ -64,7 +64,7 @@ profile tnftp /usr/bin/tnftp {
|
|||
# here we are restricting execution to files in a limited set of
|
||||
# directories, for which we also deny write access.
|
||||
file Cx @{tnftp_rx}/* -> cmds,
|
||||
deny file w @{tnftp_rx}/*,
|
||||
audit deny file w @{tnftp_rx}/*,
|
||||
|
||||
profile cmds {
|
||||
include <abstractions/base>
|
||||
|
@ -77,7 +77,7 @@ profile tnftp /usr/bin/tnftp {
|
|||
deny network,
|
||||
|
||||
file ixmr @{tnftp_rx}/*,
|
||||
deny file w @{tnftp_rx}/*,
|
||||
audit deny file w @{tnftp_rx}/*,
|
||||
|
||||
# allow read on anything on @{HOME} not explicitly denied
|
||||
owner file r @{HOME},
|
||||
|
|
Loading…
Add table
Reference in a new issue