mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 00:14:44 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge Initial profile for iotop-c

Browse source 
AppArmor profile for `iotop-c`, developed and tested in Ubuntu 24.04 LTS.

Signed-off-by: Allen Huang <allen.huang@canonical.com>

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1520
Approved-by: John Johansen <john@jjmx.net>
Merged-by: John Johansen <john@jjmx.net>
This commit is contained in:
John Johansen 2025-02-07 18:53:51 +00:00
commit 0e46a51738
1 changed files with 22 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
profiles/apparmor.d/iotop-c Normal file
View file

@ -0,0 +1,22 @@
abi <abi/4.0>,
include <tunables/global>
profile iotop-c /usr/sbin/iotop-c {
include <abstractions/base>
include <abstractions/bash>
include <abstractions/nameservice-strict>
capability net_admin,
capability sys_admin,
/proc/*/cmdline r,
/proc/*/task/ r,
/usr/sbin/iotop-c mr,
/proc/ r,
/proc/sys/kernel/task_delayacct rw,
/proc/vmstat r,
owner @{HOME}/.config/iotop/iotoprc rw,
include if exists <local/iotop-c>
}