feat(profile): general update.
This commit is contained in:
parent
533b7ac937
commit
1739c07ca1
36 changed files with 57 additions and 56 deletions
|
|
@ -56,8 +56,7 @@ profile mount @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
@{run}/ r,
|
||||
owner @{run}/mount/ rw,
|
||||
owner @{run}/mount/utab{,.*} rw,
|
||||
owner @{run}/mount/utab.lock wk,
|
||||
owner @{run}/mount/utab{,.*} rwk,
|
||||
|
||||
/tmp/sanity-squashfs-@{int} rw,
|
||||
/tmp/syscheck-squashfs-@{int} rw,
|
||||
|
|
|
|||
|
|
@ -62,7 +62,10 @@ profile pass @{exec_path} {
|
|||
owner @{user_password_store_dirs}/{,**} rw,
|
||||
owner /dev/shm/pass.*/{,*} rw,
|
||||
|
||||
@{sys}/devices/system/node/ r,
|
||||
|
||||
@{PROC}/ r,
|
||||
@{PROC}/@{pid}/stat r,
|
||||
@{PROC}/@{pids}/cmdline r,
|
||||
@{PROC}/sys/kernel/osrelease r,
|
||||
@{PROC}/uptime r,
|
||||
|
|
|
|||
|
|
@ -11,6 +11,7 @@ profile pcscd @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/devices-usb>
|
||||
|
||||
capability net_admin,
|
||||
capability sys_ptrace,
|
||||
|
||||
network netlink raw,
|
||||
|
|
@ -29,6 +30,7 @@ profile pcscd @{exec_path} {
|
|||
|
||||
owner @{run}/pcscd/{,pcscd.pid} rw,
|
||||
|
||||
@{PROC}/@{pid}/fdinfo/@{int} r,
|
||||
@{PROC}/@{pids}/stat r,
|
||||
|
||||
include if exists <local/pcscd>
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue