felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update (2).

Browse source
This commit is contained in:
Alexandre Pujol 2024-01-28 22:33:45 +00:00
parent 9b49999414
commit 049e89b379
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
21 changed files with 69 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/groups/cron/cron
View file

@ -31,7 +31,9 @@ profile cron @{exec_path} flags=(attach_disconnected) {
@{bin}/{,ba,da}sh rix,
@{bin}/nice rix,
@{bin}/ionice rix,
@{bin}/run-parts rPx,
@{bin}/exim4 rPx,
@{bin}/run-parts rCx -> run-parts, # could even be rix, as long as we are not
# using the run-parts profile we are good
@{lib}/@{multiarch}/e2fsprogs/e2scrub_all_cron rPUx,
@{lib}/sysstat/debian-sa1 rPUx,
@ -61,5 +63,18 @@ profile cron @{exec_path} flags=(attach_disconnected) {
/dev/tty rw,
profile run-parts {
include <abstractions/base>
@{bin}/run-parts mr,
/etc/cron.*/ r,
/etc/cron.*/* rPUx,
owner /tmp/#@{int} rw,
include if exists <local/cron_run_parts>
}
include if exists <local/cron>
}