felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add the app/kmod abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2024-06-16 21:50:48 +01:00
parent cb4f3af58e
commit 13b35b156e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 53 additions and 105 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/profiles-s-z/sensors-detect
View file

@ -48,13 +48,7 @@ profile sensors-detect @{exec_path} {
profile kmod {
include <abstractions/base>
@{bin}/kmod mr,
@{lib}/modprobe.d/{,*.conf} r,
/etc/modprobe.d/{,*.conf} r,
@{PROC}/cmdline r,
include <abstractions/app/kmod>
include if exists <local/sensors-detect_udevadm>
}

9
apparmor.d/profiles-s-z/spectre-meltdown-checker
View file

@ -168,20 +168,13 @@ profile spectre-meltdown-checker @{exec_path} {
profile kmod {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/app/kmod>
capability sys_module,
owner @{sys}/module/cpuid/** r,
owner @{sys}/module/msr/** r,
@{bin}/kmod mr,
/etc/modprobe.d/ r,
/etc/modprobe.d/*.conf r,
@{PROC}/cmdline r,
include if exists <local/spectre-meltdown-checker_kmod>
}