feat(profiles): general update.
This commit is contained in:
parent
cdc10fdb31
commit
1cac6715db
24 changed files with 64 additions and 5 deletions
|
|
@ -16,6 +16,7 @@ profile cockpit-bridge @{exec_path} {
|
|||
include <abstractions/python>
|
||||
|
||||
capability dac_read_search,
|
||||
capability net_admin,
|
||||
capability sys_nice,
|
||||
|
||||
network inet dgram,
|
||||
|
|
@ -41,8 +42,10 @@ profile cockpit-bridge @{exec_path} {
|
|||
/usr/share/cockpit/{,**} r,
|
||||
|
||||
/etc/cockpit/{,**} r,
|
||||
/etc/httpd/conf/mime.types r,
|
||||
/etc/login.defs r,
|
||||
/etc/machine-id r,
|
||||
/etc/mime.types r,
|
||||
/etc/motd r,
|
||||
/etc/shadow r,
|
||||
/etc/shells r,
|
||||
|
|
|
|||
|
|
@ -204,6 +204,7 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
|
|||
@{sys}/devices/pci[0-9]*/**/mdev_supported_types/*/create w,
|
||||
@{sys}/devices/pci[0-9]*/**/net/*/{,**} r,
|
||||
@{sys}/devices/pci[0-9]*/**/remove w,
|
||||
@{sys}/devices/pci[0-9]*/**/resource r
|
||||
@{sys}/devices/pci[0-9]*/**/sriov_totalvfs r,
|
||||
|
||||
@{sys}/devices/system/cpu/cpu[0-9]*/cache/{,**} r,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue