felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

tests(check): enable and enfore more checks.

Browse source
This commit is contained in:
Alexandre Pujol 2025-07-26 23:15:52 +02:00 • committed by Alex
parent da4f5f8a2c
commit 1d3b58f15c
57 changed files with 148 additions and 130 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/filesystem/btrfs
View file

@ -25,8 +25,8 @@ profile btrfs @{exec_path} flags=(attach_disconnected) {
/ r,
/.snapshots/ r,
/boot/ r,
/boot/**/ r,
@{efi}/ r,
@{efi}/**/ r,
/home/ r,
/opt/ r,
/root/ r,

4
apparmor.d/groups/filesystem/udisksd
View file

@ -49,7 +49,7 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
mount options=(rw move) -> @{MOUNTS}/,
mount options=(rw move) -> @{MOUNTS}/*/,
mount fstype=vfat -> /boot/efi/,
mount fstype=vfat -> @{efi}/,
# Allow mounting on temporary mount point
mount -> @{run}/udisks2/temp-mount-*/,
@ -59,7 +59,7 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
umount @{MOUNTS}/,
umount @{MOUNTS}/*/,
umount @{run}/udisks2/temp-mount-*/,
umount /boot/efi/,
umount @{efi}/,
umount /media/cdrom@{int}/,
signal receive set=int peer=@{p_systemd},