felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

rpcbind: update profile

Browse source 
rpcbind: update profile
This commit is contained in:
Jose Maldonado aka Yukiteru 2025-08-29 13:54:42 -04:00 • committed by Alex
parent 2c0b5405db
commit 237622f3ef
1 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/groups/network/rpcbind
View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Jeroen Rijken # Copyright (C) 2023 Jeroen Rijken
# Copyright (C) 2025 Jose Maldonado
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>, abi <abi/4.0>,
@ -9,9 +10,18 @@ include <tunables/global>
@{exec_path} = @{sbin}/rpcbind @{exec_path} = @{sbin}/rpcbind
profile rpcbind @{exec_path} flags=(complain) { profile rpcbind @{exec_path} flags=(complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict>
capability setgid,
capability setuid,
@{exec_path} rm, @{exec_path} rm,
/etc/netconfig r,
@{run}/rpcbind.lock rwkl,
@{run}/rpcbind/*.xdr rwkl,
include if exists <local/rpcbind> include if exists <local/rpcbind>
} }