felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): restrict dbus in dbus

Browse source 
even dbus-* profiles do not need access to the full bus.
This commit is contained in:
Alexandre Pujol 2024-09-25 00:48:42 +01:00
parent 69f9e8464f
commit 156cce5362
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/tunables/multiarch.d/system
View file

@ -120,7 +120,7 @@
@{dynamic}+=38[4-9] 39[0-9] 4[0-9][0-9] 50[0-9] 51[0-1] # range 384 to 511
# Dbus unique name
@{busname}=:1.@{u16}
@{busname}=:1.@{u16} :not.active.yet
# Common architecture names
@{arch}=x86_64 amd64 i386 i686