felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-07-02 22:08:15 +01:00
parent c0a081b827
commit 1675a26fbf
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 44 additions and 44 deletions
Download patch file Download diff file Expand all files Collapse all files

76
apparmor.d/groups/systemd/systemd-udevd
View file

@ -10,9 +10,9 @@ include <tunables/global>
@{exec_path} = @{bin}/udevadm @{lib}/systemd/systemd-udevd
profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/base>
include <abstractions/common/systemd>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/common/systemd>
capability chown,
capability dac_override,
@ -27,7 +27,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
capability sys_rawio,
capability sys_resource,
ptrace (read),
ptrace read,
network inet dgram,
network inet6 dgram,
@ -35,54 +35,52 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
@{exec_path} mrix,
@{sh_path} rix,
@{coreutils_path} rix,
@{bin}/*-print-pci-ids rix,
@{sh_path} rix,
@{coreutils_path} rix,
@{bin}/*-print-pci-ids rix,
@{bin}/alsactl rPUx,
@{bin}/ddcutil rPx,
@{bin}/ddcutil rPx,
@{bin}/dmsetup rPUx,
@{bin}/ethtool rix,
@{bin}/issue-generator rPx,
@{bin}/kmod rPx,
@{bin}/less rPx -> child-pager,
@{bin}/logger rix,
@{bin}/ls rix,
@{bin}/lvm rPx,
@{bin}/mknod rix,
@{bin}/more rPx -> child-pager,
@{bin}/multipath rPx,
@{bin}/nfsrahead rix,
@{bin}/pager rPx -> child-pager,
@{bin}/perl rix,
@{bin}/setfacl rix,
@{bin}/sg_inq rix,
@{bin}/ethtool rix,
@{bin}/issue-generator rPx,
@{bin}/kmod rPx,
@{bin}/less rPx -> child-pager,
@{bin}/logger rix,
@{bin}/ls rix,
@{bin}/lvm rPx,
@{bin}/mknod rix,
@{bin}/more rPx -> child-pager,
@{bin}/multipath rPx,
@{bin}/nfsrahead rix,
@{bin}/pager rPx -> child-pager,
@{bin}/perl rix,
@{bin}/setfacl rix,
@{bin}/sg_inq rix,
@{bin}/snap rPUx,
@{bin}/systemctl rCx -> systemctl,
@{bin}/systemd-run rix,
@{bin}/unshare rix,
@{bin}/systemctl rCx -> systemctl,
@{bin}/systemd-run rix,
@{bin}/unshare rix,
@{lib}/crda/* rPUx,
@{lib}/gdm-runtime-config rPx,
@{lib}/nfsrahead rPUx,
@{lib}/open-iscsi/net-interface-handler rPUx,
@{lib}/pm-utils/power.d/* rPUx,
@{lib}/snapd/snap-device-helper rPx,
@{lib}/systemd/systemd-* rPx,
@{lib}/udev/* rPUx,
/usr/share/hplip/config_usb_printer.py rPUx,
@{lib}/crda/* rPUx,
@{lib}/gdm-runtime-config rPx,
@{lib}/nfsrahead rPUx,
@{lib}/open-iscsi/net-interface-handler rPUx,
@{lib}/pm-utils/power.d/* rPUx,
@{lib}/snapd/snap-device-helper rPx,
@{lib}/systemd/systemd-* rPx,
@{lib}/udev/* rPUx,
/usr/share/hplip/config_usb_printer.py rPUx,
/etc/console-setup/*.sh rPUx,
/etc/network/cloud-ifupdown-helper rPUx,
/etc/machine-id r,
/etc/console-setup/*.sh rPUx,
/etc/network/cloud-ifupdown-helper rPUx,
/etc/default/* r,
/etc/machine-id r,
/etc/nfs.conf rk,
/etc/udev/{,**} r,
/etc/udev/hwdb.bin rw,
/etc/udev/.#hwdb.bin* rw,
/etc/udev/hwdb.bin rw,
/etc/modprobe.d/ r,
/etc/modprobe.d/*.conf r,