felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

General update

Browse source
This commit is contained in:
Jeroen Rijken 2023-01-13 12:00:23 +01:00 • committed by Alex
parent 64ad329dd9
commit 118c412378
4 changed files with 21 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

18
apparmor.d/profiles-s-z/update-secureboot-policy
View file

@ -14,9 +14,21 @@ profile update-secureboot-policy @{exec_path} {
@{exec_path} rm,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/dpkg-trigger rPx,
/usr/share/debconf/frontend rPx,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/{,m,g}awk rix,
/{usr/,}bin/dpkg-trigger rPx,
/{usr/,}bin/find rix,
/{usr/,}bin/id rix,
/{usr/,}bin/od rix,
/{usr/,}bin/sort rix,
/{usr/,}bin/touch rix,
/{usr/,}bin/wc rix,
/usr/share/debconf/frontend rPx,
/usr/share/debconf/confmodule r,
/var/lib/dkms/ r,
/var/lib/shim-signed/dkms-list r,
include if exists <local/update-secureboot-policy>
}

2
apparmor.d/profiles-s-z/whereis
View file

@ -27,6 +27,8 @@ profile whereis @{exec_path} flags=(complain) {
/usr/share/man/{**,} r,
/usr/src/{**,} r,
/etc/ r,
/opt/ r,
/opt/cni/bin/ r,
/opt/containerd/bin/ r,