felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-27 21:53:11 +00:00
parent 43ab1d064d
commit 197c1bd78a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
43 changed files with 148 additions and 236 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/groups/_full/default-sudo
View file

@ -11,8 +11,6 @@ profile default-sudo @{exec_path} {
include <abstractions/app/sudo>
capability chown,
capability dac_override,
capability dac_read_search,
capability mknod,
capability sys_ptrace,
@ -21,7 +19,6 @@ profile default-sudo @{exec_path} {
ptrace (read),
@{bin}/sudo mr,
@{bin}/su mr,
@{bin}/** Px,
@ -31,20 +28,13 @@ profile default-sudo @{exec_path} {
/var/db/sudo/lectured/ r,
/var/lib/extrausers/shadow r,
/var/lib/sudo/lectured/ r,
/var/lib/sudo/ts/ rw,
/var/lib/sudo/ts/* rwk,
/var/log/sudo.log wk,
owner /var/db/sudo/lectured/@{uid} rw,
owner /var/lib/sudo/lectured/* rw,
owner @{HOME}/.sudo_as_admin_successful rw,
@{run}/ r,
@{run}/faillock/{,*} rwk,
@{run}/systemd/sessions/* r,
owner @{run}/sudo/ rw,
owner @{run}/sudo/ts/ rw,
owner @{run}/sudo/ts/* rwk,
@{run}/ r,
@{run}/systemd/sessions/* r,
include if exists <local/default-sudo>
}