felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): ensure all access to udev/data is documented.

Browse source 
Cleanup some rule to wide in udev/data
This commit is contained in:
Alexandre Pujol 2025-08-11 16:16:35 +02:00
parent 73afa5835e
commit 175e2c3dc3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
41 changed files with 120 additions and 118 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/filesystem/udisksd
View file

@ -112,11 +112,11 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
@{run}/cryptsetup/ r,
@{run}/cryptsetup/L* rwk,
@{run}/udev/data/+acpi:* r, # for acpi
@{run}/udev/data/+acpi:* r, # Exposes ACPI objects (power buttons, batteries, thermal)
@{run}/udev/data/+pci:* r, # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
@{run}/udev/data/+platform:* r,
@{run}/udev/data/+scsi:* r,
@{run}/udev/data/+vmbus:* r,
@{run}/udev/data/+platform:* r, # Identifies onboard devices (laptop/board model, power controllers, thermal sensors)
@{run}/udev/data/+scsi:* r, # For SCSI devices. Block-storage for SATA, SAS, USB, iSCSI
@{run}/udev/data/+vmbus:* r, # For Hyper-V devices, (network adapters, storage controllers, and other virtual devices)
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/bus/ r,