felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add the app/kmod abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2024-06-16 21:50:48 +01:00
parent cb4f3af58e
commit 13b35b156e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 53 additions and 105 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/profiles-a-f/check-bios-nx
View file

@ -32,17 +32,11 @@ profile check-bios-nx @{exec_path} {
profile kmod {
include <abstractions/base>
include <abstractions/app/kmod>
@{bin}/kmod mr,
/etc/modprobe.d/ r,
/etc/modprobe.d/*.conf r,
@{lib}/modprobe.d/ r,
@{lib}/modprobe.d/*.conf r,
@{lib}/modules/*/modules.* r,
@{PROC}/cmdline r,
include if exists <local/check-bios-nx_kmod>
}
include if exists <local/check-bios-nx>

10
apparmor.d/profiles-a-f/dkms
View file

@ -97,20 +97,14 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
profile kmod {
include <abstractions/base>
include <abstractions/consoles>
@{bin}/kmod mr,
@{PROC}/cmdline r,
/etc/depmod.d/{,*} r,
include <abstractions/app/kmod>
@{lib}/modules/*/modules.* rw,
/var/lib/dkms/**/module/*.ko* r,
owner /boot/System.map-* r,
owner @{tmp}/tmp.* r,
audit owner @{tmp}/tmp.* r,
@{sys}/module/compression r,