felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-05 16:42:06 +01:00
parent 1fb5475ad1
commit 155ef6bef1
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
24 changed files with 83 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-a-f/aa-enforce
View file

@ -19,7 +19,7 @@ profile aa-enforce @{exec_path} {
@{bin}/ r,
@{bin}/apparmor_parser rPx,
/usr/share/terminfo/x/xterm-256color r,
/usr/share/terminfo/x/* r,
/etc/apparmor/logprof.conf r,
/etc/apparmor.d/{,**} rw,

2
apparmor.d/profiles-a-f/cracklib-packer
View file

@ -12,5 +12,7 @@ profile cracklib-packer @{exec_path} {
@{exec_path} mr,
owner /var/cache/cracklib/{,**} rw,
include if exists <local/cracklib-packer>
}

19
apparmor.d/profiles-a-f/fwupd
View file

@ -1,6 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2020-2022 Mikhail Morfikov
# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -30,7 +30,7 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,RemoveMatch,RequestName}
member={GetConnectionUnixUser,RemoveMatch,RequestName,ReleaseName}
peer=(name=org.freedesktop.DBus),
dbus send bus=system path=/org/freedesktop/ModemManager1
@ -54,19 +54,11 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
interface=org.freedesktop.DBus.Properties
member=GetAll,
dbus send bus=system path=/
interface=org.freedesktop.fwupd
member=Changed
peer=(label=fwupdmgr),
dbus send bus=system path=/
interface=org.freedesktop.DBus
member=Changed
peer=(label=fwupdmgr),
dbus receive bus=system path=/
interface=org.freedesktop.fwupd,
dbus receive bus=system path=/org/freedesktop/PolicyKit1/Authority
interface=org.freedesktop.DBus.Properties
member={Changed,GetAll}
@ -77,8 +69,10 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
member={GetAll,SetHints,GetPlugins,GetRemotes}
peer=(name=:*, label=fwupdmgr),
dbus bind bus=system
name=org.freedesktop.fwupd,
dbus (send, receive) bus=system
interface=org.freedesktop.fwupd,
dbus bind bus=system name=org.freedesktop.fwupd,
@{exec_path} mr,
@ -150,6 +144,7 @@ profile fwupd @{exec_path} flags=(complain,attach_disconnected) {
/dev/drm_dp_aux@{int} rw,
/dev/gpiochip@{int} r,
/dev/hidraw@{int} rw,
/dev/ipmi@{int} rwk,
/dev/mei@{int} rw,
/dev/mem r,
/dev/mtd@{int} rw,