felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Reorganise the directories.

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-01 17:02:49 +01:00
parent 91b15fcc73
commit 091d20d086
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
715 changed files with 0 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

55
profiles/systemd-analyze
View file

@ -1,55 +0,0 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2020-2021 Mikhail Morfikov
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/systemd-analyze
profile systemd-analyze @{exec_path} {
include <abstractions/base>
include <abstractions/systemd-common>
# Needed for the prctl's PR_SET_MM option:
# prctl(PR_SET_MM, PR_SET_MM_ARG_START, 0x721691edc000, 0, 0) = -1 EPERM (Operation not permitted)
capability sys_resource,
signal (send) peer=child-pager,
@{exec_path} mr,
/{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/man rPx,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/comm r,
@{PROC}/swaps r,
# For systemd-analyze cat-config
/etc/systemd/** r,
/{usr/,}lib/systemd/** r,
@{sys}/fs/cgroup/{,**} r,
@{sys}/fs/cgroup/{systemd,unified}/**/cgroup.procs rw,
@{sys}/firmware/acpi/tables/FPDT r,
@{sys}/module/**/uevent r,
@{sys}/devices/**/uevent r,
@{run}/udev/data/* r,
@{run}/udev/tags/systemd/ r,
@{run}/systemd/system/ r,
@{run}/systemd/userdb/io.systemd.DynamicUser w,
owner /tmp/systemd-temporary-*/ rw,
/usr/ r,
/etc/default/locale r,
include if exists <local/systemd-analyze>
}