felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): modernize udev access.

Browse source
This commit is contained in:
Alexandre Pujol 2023-08-24 19:31:54 +01:00
parent 73cb5a4545
commit 07cfbcd952
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
37 changed files with 234 additions and 229 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-a-f/bluetoothd
View file

@ -30,7 +30,7 @@ profile bluetoothd @{exec_path} {
/var/lib/bluetooth/{,**} rw,
@{run}/sdp rw,
@{run}/udev/data/+hid:* r,
@{run}/udev/data/+hid:* r, # for HID-Compliant Keyboard
@{sys}/devices/pci[0-9]*/**/rfkill[0-9]*/name r,
@{sys}/devices/pci[0-9]*/**/bluetooth/**/{uevent,name} r,

6
apparmor.d/profiles-a-f/fprintd
View file

@ -41,9 +41,9 @@ profile fprintd @{exec_path} flags=(attach_disconnected) {
@{run}/systemd/journal/socket rw,
@{run}/systemd/inhibit/*.ref w,
@{run}/udev/data/c23[4-9]:[0-9]* r, # For dynamic assignment range 234 to 254
@{run}/udev/data/c24[0-9]:[0-9]* r,
@{run}/udev/data/c25[0-4]:[0-9]* r,
@{run}/udev/data/c23[4-9]:@{int} r, # For dynamic assignment range 234 to 254
@{run}/udev/data/c24[0-9]:@{int} r,
@{run}/udev/data/c25[0-4]:@{int} r,
@{sys}/class/hidraw/ r,
@{sys}/devices/pci[0-9]*/**/hidraw/hidraw[0-9]*/uevent r,

6
apparmor.d/profiles-a-f/fritzing
View file

@ -59,9 +59,9 @@ profile fritzing @{exec_path} {
@{sys}/devices/**/tty*/uevent r,
@{sys}/devices/**/tty/**/uevent r,
@{run}/udev/data/c4:[0-9]* r, # for /dev/tty[0-9]*
@{run}/udev/data/c5:[0-9]* r, # for /dev/tty, /dev/console, /dev/ptmx
@{run}/udev/data/c166:[0-9]* r, # for /dev/ttyACM[0-9]*
@{run}/udev/data/c4:@{int} r, # for /dev/tty[0-9]*
@{run}/udev/data/c5:@{int} r, # for /dev/tty, /dev/console, /dev/ptmx
@{run}/udev/data/c166:[0-9]* r, # for /dev/ttyACM[0-9]*
/dev/ttyS[0-9]* rw,
/dev/ttyACM[0-9]* rw,