felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): cleanup some rules already included in abs.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-16 21:40:35 +00:00
parent b15aaae553
commit 0c5e71f971
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
36 changed files with 20 additions and 72 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/profiles-s-z/YACReader
View file

@ -43,7 +43,6 @@ profile YACReader @{exec_path} flags=(attach_disconnected,mediate_deleted) {
/dev/shm/ r,
@{PROC}/sys/kernel/random/boot_id r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/mountinfo r,

1
apparmor.d/profiles-s-z/YACReaderLibrary
View file

@ -43,7 +43,6 @@ profile YACReaderLibrary @{exec_path} flags=(attach_disconnected,mediate_deleted
owner /tmp/@{uuid} w,
@{PROC}/sys/kernel/random/boot_id r,
owner @{PROC}/@{pid}/cmdline r,
include if exists <local/YACReaderLibrary>

1
apparmor.d/profiles-s-z/snap
View file

@ -80,7 +80,6 @@ profile snap @{exec_path} {
@{PROC}/@{pids}/mountinfo r,
@{PROC}/cgroups r,
@{PROC}/cmdline r,
@{PROC}/sys/kernel/random/boot_id r,
@{PROC}/sys/kernel/random/uuid r,
@{PROC}/sys/kernel/seccomp/actions_avail r,
@{PROC}/version r,

1
apparmor.d/profiles-s-z/snapd
View file

@ -169,7 +169,6 @@ profile snapd @{exec_path} {
@{PROC}/@{pids}/stat r,
@{PROC}/cgroups r,
@{PROC}/cmdline r,
@{PROC}/sys/kernel/random/boot_id r,
@{PROC}/sys/kernel/seccomp/actions_avail r,
@{PROC}/version r,
owner @{PROC}/@{pids}/cmdline r,

4
apparmor.d/profiles-s-z/spice-vdagentd
View file

@ -16,12 +16,12 @@ profile spice-vdagentd @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
owner @{run}/spice-vdagentd/spice-vdagent-sock r,
owner @{run}/spice-vdagentd/spice-vdagentd.pid rw,
@{run}/systemd/journal/dev-log w,
@{run}/systemd/seats/seat@{int} r,
@{run}/systemd/sessions/* r,
@{run}/systemd/users/@{uid} r,
owner @{run}/spice-vdagentd/spice-vdagent-sock r,
owner @{run}/spice-vdagentd/spice-vdagentd.pid rw,
@{PROC}/@{pids}/cgroup r,

2
apparmor.d/profiles-s-z/swtpm_setup
View file

@ -25,7 +25,5 @@ profile swtpm_setup @{exec_path} {
owner /tmp/swtpm_setup.certs.*/*.cert rw,
owner /tmp/.swtpm_setup.pidfile* rw,
@{run}/systemd/userdb/ r,
include if exists <local/swtpm_setup>
}

1
apparmor.d/profiles-s-z/vlc
View file

@ -111,7 +111,6 @@ profile vlc @{exec_path} {
owner @{run}/user/@{uid}/gvfs/smb-share:server=*,share=** r,
@{PROC}/@{pids}/net/if_inet6 r,
@{PROC}/sys/kernel/random/boot_id r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,