mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
Merge with other profile
This commit is contained in:
parent
841cedb976
commit
aba2d18eb3
1 changed files with 11 additions and 6 deletions
|
@ -15,21 +15,26 @@ include <tunables/global>
|
|||
|
||||
profile lsblk /usr/bin/lsblk {
|
||||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice-strict>
|
||||
|
||||
capability dac_read_search,
|
||||
|
||||
@{sys}/block/ r,
|
||||
@{sys}/class/block/ r,
|
||||
@{sys}/dev/block/ r,
|
||||
|
||||
@{sys}/devices/pci[0-9]*:[0-9]*/** r,
|
||||
@{sys}/devices/virtual/** r,
|
||||
@{sys}/devices/platform/** r,
|
||||
|
||||
/dev/sr[0-9]* rk,
|
||||
|
||||
@{run}/mount/** r,
|
||||
@{run}/udev/data/** r,
|
||||
|
||||
@{run}/mount/** r,
|
||||
@{PROC}/swaps r,
|
||||
@{PROC}/*/mountinfo r,
|
||||
|
||||
/etc/nsswitch.conf r,
|
||||
/etc/passwd r,
|
||||
/etc/group r,
|
||||
owner @{PROC}/@{pid}/mountinfo r,
|
||||
|
||||
include if exists <local/lsblk>
|
||||
}
|
||||
|
|
Loading…
Add table
Reference in a new issue