mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Bug 202095 - useradd / userdel profiles incomplete

Browse source
This commit is contained in:
Seth Arnold 2006-11-13 09:53:10 +00:00
parent 5aacc30be4
commit 2c340e26a2
2 changed files with 22 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
profiles/extras/usr.sbin.useradd
View file

@ -15,12 +15,18 @@
/usr/sbin/useradd {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/perl>
#include <abstractions/consoles>
#include <abstractions/nameservice>
capability chown,
capability dac_override,
capability fowner,
capability fsetid,
capability sys_resource,
/bin/bash mixr,
/etc/.pwd.lock rw,
/etc/default/useradd r,
/etc/group* rwl,
@ -28,13 +34,16 @@
/etc/login.defs r,
/etc/passwd* rwl,
/etc/shadow* rwl,
/etc/pwdutils/logging r,
/etc/skel r,
/etc/skel/** r,
@{HOMEDIRS}** rw,
/proc/*/mounts r,
/proc/filesystems r,
/usr/lib*/pwdutils/*so* mr,
/usr/sbin/adduser rmix,
/usr/sbin/useradd rmix,
/usr/sbin/useradd.local rmix,
/var/log/faillog rw,
/var/log/lastlog rw,
/var/run/nscd.pid rw,

13
profiles/extras/usr.sbin.userdel
View file

@ -15,22 +15,35 @@
/usr/sbin/userdel {
#include <abstractions/authentication>
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/consoles>
#include <abstractions/perl>
#include <abstractions/nameservice>
capability chown,
capability dac_override,
capability dac_read_search,
capability sys_resource,
/bin/cat mix,
/bin/bash mix,
/dev/log w,
/etc/.pwd.lock rw,
/etc/cron.deny r,
/etc/default/useradd r,
/etc/group* rwl,
/etc/gshadow* rwl,
/etc/login.defs r,
/etc/passwd* rwl,
/etc/shadow* rwl,
/etc/pwdutils/logging r,
@{HOMEDIRS}** rwl,
/proc/*/mounts r,
/usr/bin/crontab ixr,
/usr/lib*/pwdutils/*.so.* mr,
/usr/sbin/userdel rmix,
/usr/sbin/userdel-post.local ixr,
/usr/sbin/userdel-pre.local ixr,
/usr/sbin/userdel rmix,
/var/log/lastlog rw,
# XXX