felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): include more rule from #94.

Browse source
This commit is contained in:
Alexandre Pujol 2023-01-14 13:00:01 +00:00
parent 7c4c48f4c3
commit 2431ba98aa
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
27 changed files with 119 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

16
apparmor.d/groups/network/nm-dispatcher
View file

@ -27,13 +27,25 @@ profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/run-parts rPx,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/date rix,
/{usr/,}bin/gawk rix,
/{usr/,}bin/grep rix,
/{usr/,}bin/id rix,
/{usr/,}bin/mktemp rix,
/{usr/,}bin/nmcli rix,
/{usr/,}bin/readlink rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/run-parts rPx,
/usr/share/tlp/tlp-readconfs rPUx,
/usr/share/tlp/{.**} rw,
/etc/NetworkManager/dispatcher.d/ r,
/etc/NetworkManager/dispatcher.d/** rix,
@{run}/systemd/notify rw,
@{run}/tlp/* rw,
owner @{PROC}/@{pid}/fd/ r,