mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
cac848e240
- allow reading *.so.* - allow directory listings in .../site-packages/ - allow reading various metadata files These additions are based on denials seen on openSUSE Leap 15.3 with python 3.9.
41 lines
1.8 KiB
Text
41 lines
1.8 KiB
Text
# vim:syntax=apparmor
|
|
# ------------------------------------------------------------------
|
|
#
|
|
# Copyright (C) 2002-2006 Novell/SUSE
|
|
# Copyright (C) 2009 Canonical Ltd.
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of version 2 of the GNU General Public
|
|
# License published by the Free Software Foundation.
|
|
#
|
|
# ------------------------------------------------------------------
|
|
|
|
abi <abi/3.0>,
|
|
|
|
/usr/{local/,}lib{,32,64}/python{2.[4-7],3,3.[0-9],3.1[0-9]}/**.{pyc,so,so.*[0-9]} mr,
|
|
/usr/{local/,}lib{,32,64}/python{2.[4-7],3,3.[0-9],3.1[0-9]}/**.{egg,py,pth} r,
|
|
/usr/{local/,}lib{,32,64}/python{2.[4-7],3,3.[0-9],3.1[0-9]}/{site,dist}-packages/ r,
|
|
/usr/{local/,}lib{,32,64}/python{2.[4-7],3,3.[0-9],3.1[0-9]}/{site,dist}-packages/**/ r,
|
|
/usr/{local/,}lib{,32,64}/python{2.[4-7],3,3.[0-9],3.1[0-9]}/{site,dist}-packages/*.dist-info/{METADATA,namespace_packages.txt} r,
|
|
/usr/{local/,}lib{,32,64}/python{2.[4-7],3,3.[0-9],3.1[0-9]}/{site,dist}-packages/*.VERSION r,
|
|
/usr/{local/,}lib{,32,64}/python{2.[4-7],3,3.[0-9],3.1[0-9]}/{site,dist}-packages/*.egg-info/PKG-INFO r,
|
|
/usr/{local/,}lib{,32,64}/python3.{1,}[0-9]/lib-dynload/*.so mr,
|
|
|
|
# Site-wide configuration
|
|
/etc/python{2.[4-7],3.[0-9],3.1[0-9]}/** r,
|
|
|
|
# shared python paths
|
|
/usr/share/{pyshared,pycentral,python-support}/** r,
|
|
/{var,usr}/lib/{pyshared,pycentral,python-support}/** r,
|
|
/usr/lib/{pyshared,pycentral,python-support}/**.so mr,
|
|
/var/lib/{pyshared,pycentral,python-support}/**.pyc mr,
|
|
/usr/lib/python3/dist-packages/**.so mr,
|
|
|
|
# wx paths
|
|
/usr/lib/wx/python/*.pth r,
|
|
|
|
# python build configuration and headers
|
|
/usr/include/python{2.[4-7],3.[0-9],3.1[0-9]}*/pyconfig.h r,
|
|
|
|
# Include additions to the abstraction
|
|
include if exists <abstractions/python.d>
|