feat(profile): improve integration with Tumbleweed.

see #576
2024-10-23 11:39:49 +01:00 · 2024-10-23 11:39:49 +01:00 · 25049292eb
commit 25049292eb
parent d9208e0648
11 changed files with 21 additions and 7 deletions
--- a/apparmor.d/profiles-s-z/sync
+++ b/apparmor.d/profiles-s-z/sync
@ -13,6 +13,10 @@ profile sync @{exec_path} {

  @{exec_path} mr,

+  # Common paths where sync is used to flush all write operations on a single file to disk
+  # TODO: /** rw, ?
+  /boot/initrd-*-default rw,
+
  include if exists <local/sync>
 }