mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix dhclient and dhclient-script profiles to work on debian buster

Browse source
This commit is contained in:
Anton Nesterov 2020-10-06 19:51:07 +00:00
parent 6e7d1b6baa
commit 9b70ef4fb7
2 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
profiles/apparmor/profiles/extras/sbin.dhclient
View file

@ -58,14 +58,14 @@ profile dhclient /{usr/,}sbin/dhclient {
/usr/lib/{NetworkManager/,}nm-dhcp-helper rix,
/var/lib/dhclient/dhclient{6,}.leases* rw,
/var/lib/dhcp/dhclient*.leases rw,
/var/lib/dhcp6/dhclient.leases rw,
/var/lib/dhcp{6,}/dhclient.leases rw,
/var/lib/NetworkManager/dhclient{6,}-*.conf r,
/var/lib/NetworkManager/dhclient{6,}-*.lease rw,
/var/log/lastlog r,
/var/log/messages r,
/var/log/wtmp r,
/{,var/}run/dhclient{6,}.pid rw,
/{,var/}run/dhclient{6,}-*.pid rw,
/{,var/}run/dhclient{6,}{-,.}*.pid rw,
/var/spool r,
/var/spool/mail r,

7
profiles/apparmor/profiles/extras/sbin.dhclient-script
View file

@ -12,13 +12,20 @@ profile dhclient-script /{usr/,}sbin/dhclient-script {
include <abstractions/bash>
include <abstractions/consoles>
/{usr/,}bin/dash rix,
/{usr/,}bin/bash rix,
/{usr/,}bin/grep rix,
/{usr/,}bin/sleep rix,
/{usr/,}bin/touch rix,
/{usr/,}bin/run-parts rix,
/{usr/,}bin/logger rix,
/dev/.sysconfig/network/** r,
/etc/netconfig.d/* mrix,
/etc/sysconfig/network/** r,
/etc/dhcp/{**,} r,
/{usr/,}sbin/dhclient-script r,
/{usr/,}sbin/ip rix,
/{usr/,}sbin/resolvconf rPux,
include if exists <local/sbin.dhclient-script>
}