felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add udevadm app abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2024-06-15 16:40:11 +01:00
parent 39bfa9a40b
commit 035e1da7b2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 51 additions and 178 deletions
Download patch file Download diff file Expand all files Collapse all files

22
apparmor.d/profiles-a-f/f3fix
View file

@ -37,26 +37,12 @@ profile f3fix @{exec_path} {
profile udevadm {
include <abstractions/base>
include <abstractions/app/udevadm>
include <abstractions/disks-write>
ptrace (read),
@{bin}/udevadm mr,
/etc/udev/udev.conf r,
owner @{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/cgroup r,
@{PROC}/cmdline r,
@{PROC}/1/sched r,
@{PROC}/1/environ r,
@{PROC}/sys/kernel/osrelease r,
@{PROC}/sys/kernel/random/boot_id r,
@{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,
# file_inherit
/dev/sd[a-z]* rw,
ptrace read,
include if exists <local/f3fix_udevadm>
}
include if exists <local/f3fix>

22
apparmor.d/profiles-a-f/fatresize
View file

@ -36,26 +36,10 @@ profile fatresize @{exec_path} {
profile udevadm {
include <abstractions/base>
include <abstractions/app/udevadm>
include <abstractions/disks-write>
ptrace (read),
@{bin}/udevadm mr,
/etc/udev/udev.conf r,
owner @{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/cgroup r,
@{PROC}/cmdline r,
@{PROC}/1/sched r,
@{PROC}/1/environ r,
@{PROC}/sys/kernel/osrelease r,
@{PROC}/sys/kernel/random/boot_id r,
@{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,
# file_inherit
/dev/{s,v}d[a-z]* rw,
include if exists <local/fatresize_udevadm>
}
include if exists <local/fatresize>