feat(full): add new systemd variable.

2023-11-19 11:13:40 +00:00 · 2023-11-19 11:13:40 +00:00 · 2143fb03af
commit 2143fb03af
parent b79a1fcd31
7 changed files with 14 additions and 5 deletions
--- a/apparmor.d/groups/systemd/systemd-update-done
+++ b/apparmor.d/groups/systemd/systemd-update-done
@ -12,7 +12,7 @@ profile systemd-update-done @{exec_path} {

  capability net_admin,

-  ptrace (read) peer=unconfined,
+  ptrace (read) peer=@{systemd},

  @{exec_path} mr,

--- a/apparmor.d/groups/systemd/systemd-userwork
+++ b/apparmor.d/groups/systemd/systemd-userwork
@ -14,6 +14,8 @@ profile systemd-userwork @{exec_path} flags=(attach_disconnected) {

  capability sys_resource,

+  signal (send) peer=@{systemd},
+
  @{exec_path} mr,

  /etc/machine-id r,