feat(profiles): general update.

This commit is contained in:
Alexandre Pujol 2023-08-06 16:30:38 +02:00
parent cdc10fdb31
commit 1cac6715db
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
24 changed files with 64 additions and 5 deletions

View file

@ -16,6 +16,7 @@ profile cockpit-bridge @{exec_path} {
include <abstractions/python>
capability dac_read_search,
capability net_admin,
capability sys_nice,
network inet dgram,
@ -41,8 +42,10 @@ profile cockpit-bridge @{exec_path} {
/usr/share/cockpit/{,**} r,
/etc/cockpit/{,**} r,
/etc/httpd/conf/mime.types r,
/etc/login.defs r,
/etc/machine-id r,
/etc/mime.types r,
/etc/motd r,
/etc/shadow r,
/etc/shells r,

View file

@ -204,6 +204,7 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/pci[0-9]*/**/mdev_supported_types/*/create w,
@{sys}/devices/pci[0-9]*/**/net/*/{,**} r,
@{sys}/devices/pci[0-9]*/**/remove w,
@{sys}/devices/pci[0-9]*/**/resource r
@{sys}/devices/pci[0-9]*/**/sriov_totalvfs r,
@{sys}/devices/system/cpu/cpu[0-9]*/cache/{,**} r,