lsb_release: added permissions needed by openSUSE implementation.

This commit is contained in:
Daniel Richard G 2018-08-01 19:04:00 -04:00
parent f73514052d
commit 99e45b59d3

View file

@ -13,6 +13,8 @@ profile lsb_release {
owner @{PROC}/@{pid}/fd/ r,
/dev/tty rw,
/usr/bin/lsb_release r,
/usr/bin/python3.[0-9] mr,
@ -20,10 +22,15 @@ profile lsb_release {
/etc/default/apport r,
/etc/dpkg/origins/** r,
/etc/lsb-release r,
/etc/lsb-release.d/ r,
/{usr/,}bin/bash ixr,
/{usr/,}bin/dash ixr,
/usr/bin/basename ixr,
/usr/bin/dpkg-query ixr,
/usr/bin/getopt ixr,
/usr/bin/sed ixr,
/usr/bin/tr ixr,
# TODO - many more permissions needed for this to work
deny /usr/bin/apt-cache x,
@ -32,6 +39,7 @@ profile lsb_release {
/usr/include/python*/pyconfig.h r,
/usr/share/distro-info/** r,
/usr/share/dpkg/** r,
/usr/share/terminfo/** r,
/var/lib/dpkg/** r,
# file_inherit