apparmor/profiles/apparmor.d/abstractions/ubuntu-konsole at c3b0a3e512451a153b94477a49485a64f23c8e21 - mirrors/apparmor - Forgejo: Beyond coding. We Forge.

mirrors/apparmor

mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-05 17:01:00 +01:00

Steve Beattie 1cc0885890 Subject: profiles - use @{pid} tunable

This patch adds the kernelvars tunable to the global set that is usually
included by default in apparmor policies. It then converts the rules
that are intended to match /proc/pid to use this tunable.

Signed-off-by: Steve Beattie <sbeattie@ubuntu.com>
Acked-By: Seth Arnold <seth.arnold@canonical.com>

2013-01-02 15:34:38 -08:00

17 lines

343 B

Text

Raw Blame History

 # vim:syntax=apparmor
 #
 # for allowing access to konsole
 #
   #include <abstractions/consoles>
   #include <abstractions/kde>
   capability sys_ptrace,
   @{PROC}/@{pid}/status r,
   @{PROC}/@{pid}/stat r,
   @{PROC}/@{pid}/cmdline r,
   /{,var/}run/utmp r,
   /dev/ptmx rw,
   # do not use ux or Ux here. Use at a minimum ix
   /usr/bin/konsole ix,