feat(profiles): general update.
This commit is contained in:
parent
cdc10fdb31
commit
1cac6715db
24 changed files with 64 additions and 5 deletions
|
|
@ -72,8 +72,9 @@ profile cupsd @{exec_path} flags=(attach_disconnected) {
|
|||
@{lib}/cups/notifier/* rix,
|
||||
|
||||
/usr/share/cups/{,**} r,
|
||||
/usr/share/ppd/{,**} r,
|
||||
/usr/share/ghostscript/{,**} r,
|
||||
/usr/share/poppler/{,**} r,
|
||||
/usr/share/ppd/{,**} r,
|
||||
|
||||
/etc/cups/{,**} rw,
|
||||
/etc/foomatic/* r,
|
||||
|
|
|
|||
|
|
@ -121,6 +121,8 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
owner /boot/System.map-* r,
|
||||
|
||||
owner /tmp/tmp.* r,
|
||||
|
||||
# Inherit silencer
|
||||
deny /apparmor/.null rw,
|
||||
|
||||
|
|
|
|||
|
|
@ -15,6 +15,8 @@ profile findmnt @{exec_path} flags=(attach_disconnected,complain) {
|
|||
|
||||
capability dac_read_search,
|
||||
|
||||
unix (receive) type=stream,
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
/etc/fstab r,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue