2 commits

Author	SHA1	Message	Date
Vincas Dargis	2438179b76	Use @{sys} tunable in profiles and abstractions ... Commit aa06528790 made @{sys} tunable available by default. Update profiles and abstractions to actually use @{sys} tunable for better confinement in the future (when @{sys} becomes kernel var). Closes LP#1728551	2018-11-08 20:04:46 +02:00
Vincas Dargis	327420b151	Add nvidia_modprobe named profile ... nvidia-modprobe is setuid executable is used to create various device files and load the the NVIDIA kernel module (https://github.com/NVIDIA/nvidia-modprobe). Add named profile to be used in application profiles for confining potentially risky setuid application.	2018-10-02 20:29:10 +03:00