felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): modernize udev access.

Browse source
This commit is contained in:
Alexandre Pujol 2023-08-24 19:31:54 +01:00
parent 73cb5a4545
commit 07cfbcd952
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
37 changed files with 234 additions and 229 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/groups/network/ModemManager
View file

@ -53,13 +53,13 @@ profile ModemManager @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{run}/udev/data/+pci:* r,
@{run}/udev/data/+platform* r,
@{run}/udev/data/+platform:* r,
@{run}/udev/data/+usb:* r,
@{run}/udev/data/c16[6,7]:[0-9]* r, # USB modems
@{run}/udev/data/c18[0,8,9]:[0-9]* r, # USB devices & USB serial converters
@{run}/udev/data/c4:[0-9]* r, # for /dev/tty[0-9]*
@{run}/udev/data/c5:[0-9]* r, # for /dev/tty, /dev/console, /dev/ptmx
@{run}/udev/data/n[0-9]* r,
@{run}/udev/data/c16[6,7]:[0-9]* r, # USB modems
@{run}/udev/data/c18[0,8,9]:[0-9]* r, # USB devices & USB serial converters
@{run}/udev/data/c4:@{int} r, # for /dev/tty[0-9]*
@{run}/udev/data/c5:@{int} r, # for /dev/tty, /dev/console, /dev/ptmx
@{run}/udev/data/n@{int} r,
@{run}/systemd/inhibit/*.ref rw,

6
apparmor.d/groups/network/NetworkManager
View file

@ -139,10 +139,10 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
@{run}/nscd/db* rwl,
@{run}/systemd/inhibit/[0-9]*.ref rw,
@{run}/systemd/users/@{uid} r,
@{run}/udev/data/+pci* r,
@{run}/udev/data/+platform* r,
@{run}/udev/data/+pci:* r,
@{run}/udev/data/+platform:* r,
@{run}/udev/data/+rfkill:* r,
@{run}/udev/data/n[0-9]* r,
@{run}/udev/data/n@{int} r,
@{sys}/devices/**/uevent r,
@{sys}/devices/virtual/net/{,**} r,

2
apparmor.d/groups/network/dhcpcd
View file

@ -54,7 +54,7 @@ profile dhcpcd @{exec_path} flags=(attach_disconnected) {
@{run}/dhcpcd/hook-state/resolv.conf/ rw,
@{run}/dhcpcd/unpriv.sock w,
@{run}/udev/data/n[0-9]* r,
@{run}/udev/data/n@{int} r,
@{sys}/devices/pci[0-9]*/**/uevent r,
@{sys}/devices/virtual/dmi/id/product_uuid r,

4
apparmor.d/groups/network/nmcli
View file

@ -20,8 +20,8 @@ profile nmcli @{exec_path} {
owner @{HOME}/.nm-vpngate/*.ovpn r,
owner @{HOME}/.cert/nm-openvpn/*.pem rw,
@{run}/udev/data/+pci* r,
@{run}/udev/data/n[0-9]* r,
@{run}/udev/data/+pci:* r,
@{run}/udev/data/n@{int} r,
@{sys}/devices/virtual/net/{,**} r,
@{sys}/devices/pci[0-9]*/**/net/*/{,**} r,