mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 00:14:44 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

profiles/a/frr: clean up rules only needed by topotests

Browse source
This commit is contained in:
Jorge Sancho Larraz 2025-02-05 16:31:03 +01:00
parent 7a98040b1b
commit c67061c64f
1 changed files with 2 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
profiles/apparmor.d/abstractions/frr
View file

@ -23,6 +23,7 @@
capability dac_override,
capability dac_read_search,
/ r,
@{run}/frr/ r,
@{run}/frr/zserv.api rw,
@{run}/frr/@{profile_name}.pid rwk,
@ -39,7 +40,7 @@
# Daemon config
/etc/frr/ r,
/etc/frr/@{profile_name}.conf{,.*} rwl,
/etc/frr/@{profile_name}.conf rw,
# Log file
/var/log/frr/ w,
@ -51,13 +52,4 @@
owner /var/tmp/frr/@{profile_name}.@{pid}/crashlog w,
owner /var/tmp/frr/@{profile_name}.@{pid}/logbuf.@{tid} rw,
# Program output (working directory)
owner / r,
owner /tmp/ r,
owner /tmp/topotests/ r,
owner /tmp/topotests/** rw,
# Tests for staticd, bgpd, ospfd
owner /tmp/*.log w,
include if exists <abstractions/frr.d>