felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(abs): update pci path for disk acess.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-05 23:32:11 +01:00
parent 19c1bcc2c7
commit 245db40b2d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 12 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/abstractions/disks-read
View file

@ -14,11 +14,12 @@
# Regular disk/partition devices # Regular disk/partition devices
/dev/{s,v}d[a-z]* rk, /dev/{s,v}d[a-z]* rk,
/dev/{s,v}d[a-z]*@{int} rk, /dev/{s,v}d[a-z]*@{int} rk,
@{sys}/devices/pci[0-9]*/**/block/{s,v}d[a-z]/ r, @{sys}/devices/@{pci}/ata@{int}/** r,
@{sys}/devices/pci[0-9]*/**/block/{s,v}d[a-z]/** r, @{sys}/devices/@{pci}/block/{s,v}d[a-z]/ r,
@{sys}/devices/@{pci}{,/**}/ata@{int}/** r, @{sys}/devices/@{pci}/block/{s,v}d[a-z]/** r,
@{sys}/devices/@{pci}{,/**}/usb@{int}/** r, @{sys}/devices/@{pci}/host@{int}/** r,
@{sys}/devices/@{pci}{,/**}/virtio@{int}/** r, @{sys}/devices/@{pci}/usb@{int}/** r,
@{sys}/devices/@{pci}/virtio@{int}/** r,
# SSD Nvme devices # SSD Nvme devices
/dev/nvme[0-9]* rk, /dev/nvme[0-9]* rk,

11
apparmor.d/abstractions/disks-write
View file

@ -14,11 +14,12 @@
# Regular disk/partition devices # Regular disk/partition devices
/dev/{s,v}d[a-z]* rwk, /dev/{s,v}d[a-z]* rwk,
/dev/{s,v}d[a-z]*@{int} rwk, /dev/{s,v}d[a-z]*@{int} rwk,
@{sys}/devices/@{pci}{,/**}/block/{s,v}d[a-z]/ r, @{sys}/devices/@{pci}/ata@{int}/** r,
@{sys}/devices/@{pci}{,/**}/block/{s,v}d[a-z]/** r, @{sys}/devices/@{pci}/block/{s,v}d[a-z]/ r,
@{sys}/devices/@{pci}{,/**}/ata@{int}/** r, @{sys}/devices/@{pci}/block/{s,v}d[a-z]/** r,
@{sys}/devices/@{pci}{,/**}/usb@{int}/** r, @{sys}/devices/@{pci}/host@{int}/** r,
@{sys}/devices/@{pci}{,/**}/virtio@{int}/** r, @{sys}/devices/@{pci}/usb@{int}/** r,
@{sys}/devices/@{pci}/virtio@{int}/** r,
# SSD Nvme devices # SSD Nvme devices
/dev/nvme[0-9]* rwk, /dev/nvme[0-9]* rwk,