felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-11-27 19:35:42 +00:00
parent fade97486d
commit 209688fe86
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
16 changed files with 37 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/profiles-s-z/sudo
View file

@ -1,6 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2022 Mikhail Morfikov
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -8,6 +8,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/sudo
#@{bin}/su
profile sudo @{exec_path} {
include <abstractions/base>
include <abstractions/app-launcher-root>
@ -40,10 +41,10 @@ profile sudo @{exec_path} {
signal (send) set=(cont,hup) peer=su,
signal (send) set=(winch),
dbus send bus=system path=/org/freedesktop/login[0-9]
interface=org.freedesktop.login[0-9].Manager
dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.logi1.Manager
member=CreateSession
peer=(name=org.freedesktop.login[0-9]),
peer=(name=org.freedesktop.login1),
dbus (send receive) bus=session path=/org/freedesktop/systemd1
interface=org.freedesktop.systemd.Manager