felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

General update

Browse source
This commit is contained in:
Jeroen Rijken 2022-08-01 18:31:32 +02:00 • committed by Alex
parent 575d781c88
commit 099a97cb36
26 changed files with 137 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/profiles-s-z/zsysd
View file

@ -23,7 +23,8 @@ profile zsysd @{exec_path} flags=(complain) {
@{exec_path} rmix,
/{usr/,}{local/,}{s,}bin/zfs rPx,
/{usr/,}{local/,}{s,}bin/zpool rPx,
/{usr/,}{s,}bin/update-grub rPUx,
# ALLOWED zsysd exec /usr/sbin/update-grub info="no new privs" comm=zsysd requested_mask=x denied_mask=x error=-1
/{usr/,}{s,}bin/update-grub rPx,
/etc/hostid r,
/etc/zsys.conf r,
@ -35,10 +36,10 @@ profile zsysd @{exec_path} flags=(complain) {
@{run}/zsys-snapshot.unattended-upgrades rw,
@{run}/zsysd.sock rw,
owner @{PROC}/@{pids}/stat r,
@{PROC}/@{pids}/mounts r,
@{PROC}/cmdline r,
@{PROC}/sys/kernel/spl/hostid r,
@{PROC}/@{pids}/stat r,
@{PROC}/@{pids}/mounts r,
@{PROC}/cmdline r,
@{PROC}/sys/kernel/spl/hostid r,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,