felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-01 13:19:19 +00:00
parent 70a8407bd7
commit 0a74d5c6fe
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
22 changed files with 39 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/groups/systemd/systemd-tty-ask-password-agent
View file

@ -12,12 +12,14 @@ profile systemd-tty-ask-password-agent @{exec_path} {
include <abstractions/consoles>
include <abstractions/systemd-common>
audit capability net_admin,
capability dac_override,
capability net_admin,
capability sys_resource,
signal (receive) set=(term cont) peer=default,
signal (receive) set=(term cont) peer=logrotate,
@{exec_path} mr,
@{exec_path} mrix,
@{run}/systemd/ask-password-block/{,*} rw,
@{run}/systemd/ask-password/{,*} rw,
@ -25,6 +27,9 @@ profile systemd-tty-ask-password-agent @{exec_path} {
@{PROC}/@{pids}/stat r,
@{sys}/devices/virtual/tty/console/active r,
@{sys}/devices/virtual/tty/tty@{int}/active r,
/dev/tty@{int} rw,
include if exists <local/systemd-tty-ask-password-agent>