General update

This commit is contained in:
Jeroen Rijken 2022-08-01 18:31:32 +02:00 committed by Alex
parent 575d781c88
commit 099a97cb36
26 changed files with 137 additions and 23 deletions

View file

@ -14,6 +14,8 @@ profile gpg @{exec_path} {
include <abstractions/user-download-strict>
include <abstractions/nameservice-strict>
capability dac_read_search,
network netlink raw,
@{exec_path} mrix,

View file

@ -12,6 +12,8 @@ profile gpgconf @{exec_path} {
include <abstractions/consoles>
include <abstractions/nameservice-strict>
capability dac_read_search,
@{exec_path} mrix,
/{usr/,}bin/gpg-connect-agent rPx,

View file

@ -11,6 +11,8 @@ profile gpgsm @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
capability dac_read_search,
@{exec_path} mr,
deny /usr/bin/.gnupg/ w,