felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

style(profiles): small rules improvment.

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-14 19:25:45 +01:00
parent 454456a844
commit 08bb1b44a6
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
11 changed files with 35 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/systemd/systemd-makefs
View file

@ -9,6 +9,8 @@ include <tunables/global>
@{exec_path} = /{usr/,}lib/systemd/systemd-makefs
profile systemd-makefs @{exec_path} {
include <abstractions/base>
include <abstractions/disks-read>
include <abstractions/systemd-common>
capability net_admin,
capability sys_resource,
@ -18,10 +20,5 @@ profile systemd-makefs @{exec_path} {
/{usr/,}{s,}bin/mkswap rPx,
/{usr/,}bin/mkfs.* rPx,
@{sys}/devices/virtual/block/zram[0-9]*/ r,
@{sys}/devices/virtual/block/zram[0-9]*/** r,
/dev/zram[0-9]* rwk,
include if exists <local/systemd-makefs>
}