felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): continue replacing [0-9]* by @{int}.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-26 21:10:53 +00:00
parent 99e4c4622d
commit 00051bd2f0
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
100 changed files with 222 additions and 229 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/systemd/systemd-ac-power
View file

@ -17,8 +17,8 @@ profile systemd-ac-power @{exec_path} {
@{sys}/class/power_supply/ r,
@{sys}/devices/**/power_supply/{AC,BAT[0-9]*}/ r,
@{sys}/devices/**/power_supply/{AC,BAT[0-9]*}/{type,online} r,
@{sys}/devices/**/power_supply/{AC,BAT@{int}}/ r,
@{sys}/devices/**/power_supply/{AC,BAT@{int}}/{type,online} r,
include if exists <local/systemd-ac-power>
}

2
apparmor.d/groups/systemd/systemd-dissect
View file

@ -32,7 +32,7 @@ profile systemd-dissect @{exec_path} {
owner /tmp/dissect-*/{,**} rw,
@{sys}/devices/virtual/block/loop[0-9]*/{,**} r,
@{sys}/devices/virtual/block/loop@{int}/{,**} r,
@{sys}/kernel/uevent_seqnum r,
@{PROC}/@{pids}/cgroup r,

4
apparmor.d/groups/systemd/systemd-homed
View file

@ -34,7 +34,7 @@ profile systemd-homed @{exec_path} flags=(attach_disconnected) {
network netlink raw,
mount options=(rw, rslave) -> @{run}/,
mount /dev/dm-[0-9]* -> @{run}/systemd/user-home-mount/,
mount /dev/dm-@{int} -> @{run}/systemd/user-home-mount/,
# dbus: own bus=system name=org.freedesktop.home1
@ -77,7 +77,7 @@ profile systemd-homed @{exec_path} flags=(attach_disconnected) {
owner @{PROC}/@{pid}/uid_map w,
/dev/loop-control rwk,
/dev/loop[0-9]* rw,
/dev/loop@{int} rw,
/dev/mapper/control rw,
/dev/mqueue/ r,
/dev/shm/ r,

6
apparmor.d/groups/systemd/systemd-journald
View file

@ -46,7 +46,7 @@ profile systemd-journald @{exec_path} {
@{run}/udev/data/+acpi:* r,
@{run}/udev/data/+bluetooth:* r,
@{run}/udev/data/+hid:* r,
@{run}/udev/data/+hid:* r, # for HID-Compliant Keyboard
@{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad
@{run}/udev/data/+pci:* r,
@{run}/udev/data/+platform:* r,
@ -61,8 +61,8 @@ profile systemd-journald @{exec_path} {
@{run}/udev/data/c4:@{int} r, # For TTY devices
@{run}/udev/data/c10:@{int} r, # For non-serial mice, misc features
@{run}/udev/data/c108:@{int} r, # For /dev/ppp
@{run}/udev/data/c18[8-9]:[0-9]* r, # USB devices & USB serial converters
@{run}/udev/data/c29:[0-9]* r, # For CD-ROM
@{run}/udev/data/c18[8-9]:@{int} r, # USB devices & USB serial converters
@{run}/udev/data/c29:@{int} r, # For CD-ROM
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/devices/**/uevent r,

4
apparmor.d/groups/systemd/systemd-logind
View file

@ -78,9 +78,9 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
@{run}/udev/data/c13:@{int} r, # For /dev/input/*
@{run}/udev/data/c14:@{int} r, # Open Sound System (OSS)
@{run}/udev/data/c21:@{int} r, # Generic SCSI access
@{run}/udev/data/c29:[0-9]* r, # For /dev/fb[0-9]*
@{run}/udev/data/c29:@{int} r, # For /dev/fb[0-9]*
@{run}/udev/data/c81:@{int} r, # For video4linux
@{run}/udev/data/c89:[0-9]* r, # For I2C bus interface
@{run}/udev/data/c89:@{int} r, # For I2C bus interface
@{run}/udev/data/c116:@{int} r, # For ALSA
@{run}/udev/data/c226:@{int} r, # For /dev/dri/card*
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511

2
apparmor.d/groups/systemd/systemd-rfkill
View file

@ -24,7 +24,7 @@ profile systemd-rfkill @{exec_path} {
@{run}/systemd/notify rw,
@{run}/udev/data/+rfkill:* r,
@{sys}/devices/**/rfkill[0-9]*/{uevent,name} r,
@{sys}/devices/**/rfkill@{int}/{uevent,name} r,
/dev/rfkill rw,

12
apparmor.d/groups/systemd/zram-generator
View file

@ -19,13 +19,13 @@ profile zram-generator @{exec_path} {
/etc/systemd/zram-generator.conf r,
@{sys}/devices/virtual/block/zram[0-9]*/{disksize,reset,comp_algorithm} rw,
@{sys}/block/zram[0-9]*/{disksize,reset} rw,
owner @{run}/systemd/generator/{,*/}var-cache-makepkg.mount rw,
owner @{run}/systemd/generator/dev-zram[0-9]*.swap rw,
owner @{run}/systemd/generator/swap.target.wants/{,dev-zram[0-9]*.swap} rw,
owner @{run}/systemd/generator/systemd-zram-setup@zram[0-9]*.service.d/{,*.conf} rw,
owner @{run}/systemd/generator/dev-zram@{int}.swap rw,
owner @{run}/systemd/generator/swap.target.wants/{,dev-zram@{int}.swap} rw,
owner @{run}/systemd/generator/systemd-zram-setup@zram@{int}.service.d/{,*.conf} rw,
@{sys}/devices/virtual/block/zram@{int}/{disksize,reset,comp_algorithm} rw,
@{sys}/block/zram@{int}/{disksize,reset} rw,
@{PROC}/crypto r,