Merge with other profile

This commit is contained in:
Hlib Korzhynskyy 2024-12-03 10:49:29 -03:30
parent 841cedb976
commit aba2d18eb3

View file

@ -15,21 +15,26 @@ include <tunables/global>
profile lsblk /usr/bin/lsblk {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
capability dac_read_search,
@{sys}/block/ r,
@{sys}/class/block/ r,
@{sys}/dev/block/ r,
@{sys}/devices/pci[0-9]*:[0-9]*/** r,
@{sys}/devices/virtual/** r,
@{sys}/devices/platform/** r,
/dev/sr[0-9]* rk,
@{run}/mount/** r,
@{run}/udev/data/** r,
@{run}/mount/** r,
@{PROC}/swaps r,
@{PROC}/*/mountinfo r,
/etc/nsswitch.conf r,
/etc/passwd r,
/etc/group r,
owner @{PROC}/@{pid}/mountinfo r,
include if exists <local/lsblk>
}