felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): replace old [0-9]* glob by @{int}

Browse source 
Beware some [0-9]* glob are actually not proper @{int}.
This commit is contained in:
Alexandre Pujol 2023-08-18 17:09:53 +01:00
parent 8ea4491a56
commit 275d6b6e62
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
368 changed files with 637 additions and 636 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/systemd/coredumpctl
View file

@ -27,7 +27,7 @@ profile coredumpctl @{exec_path} flags=(complain) {
/var/lib/dbus/machine-id r,
/etc/machine-id r,
/var/lib/systemd/coredump/core.*.[0-9]*.@{hex}.[0-9]*.[0-9]*.zst r,
/var/lib/systemd/coredump/core.*.@{int}.@{hex}.@{int}.@{int}.zst r,
/{run,var}/log/journal/ r,
/{run,var}/log/journal/@{md5}/ r,

2
apparmor.d/groups/systemd/networkctl
View file

@ -47,7 +47,7 @@ profile networkctl @{exec_path} flags=(attach_disconnected) {
/{run,var}/log/journal/@{md5}/system.journal* r,
/{run,var}/log/journal/@{md5}/system@@{hex}.journal* r,
@{run}/systemd/netif/links/[0-9]* r,
@{run}/systemd/netif/links/@{int} r,
@{run}/systemd/netif/state r,
@{run}/systemd/notify w,

8
apparmor.d/groups/systemd/systemd-backlight
View file

@ -27,15 +27,15 @@ profile systemd-backlight @{exec_path} {
@{sys}/class/ r,
@{sys}/class/backlight/ r,
@{sys}/devices/pci[0-9]*/*:[0-9]*.[0-9]*/**/ r,
@{sys}/devices/pci[0-9]*/*:@{int}.@{int}/**/ r,
@{sys}/devices/pci[0-9]*/**/ r,
@{sys}/devices/pci[0-9]*/**/backlight/**/{max_brightness,actual_brightness} r,
@{sys}/devices/pci[0-9]*/**/backlight/**/{uevent,type} r,
@{sys}/devices/pci[0-9]*/**/backlight/**/brightness rw,
@{sys}/devices/pci[0-9]*/**/class r,
@{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/{max_brightness,actual_brightness} r,
@{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/{uevent,type} r,
@{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/**/brightness rw,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/{max_brightness,actual_brightness} r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/{uevent,type} r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/brightness rw,
@{sys}/devices/pci[0-9]*/**/uevent r,
@{sys}/devices/platform/**/leds/*backlight*/brightness rw,

2
apparmor.d/groups/systemd/systemd-coredump
View file

@ -41,7 +41,7 @@ profile systemd-coredump @{exec_path} flags=(attach_disconnected,mediate_deleted
@{PROC}/@{pids}/comm r,
@{PROC}/@{pids}/environ r,
@{PROC}/@{pids}/fd/ r,
@{PROC}/@{pids}/fdinfo/[0-9]* r,
@{PROC}/@{pids}/fdinfo/@{int} r,
@{PROC}/@{pids}/limits r,
@{PROC}/@{pids}/mountinfo r,
@{PROC}/@{pids}/ns/ r,

2
apparmor.d/groups/systemd/systemd-environment-d-generator
View file

@ -22,7 +22,7 @@ profile systemd-environment-d-generator @{exec_path} {
@{etc_ro}/environment r,
@{etc_ro}/environment.d/{,**} r,
/snap/snapd/[0-9]*/usr/lib/environment.d/{,*.conf} r,
/snap/snapd/@{int}/usr/lib/environment.d/{,*.conf} r,
owner @{user_config_dirs}/environment.d/{,*.conf} r,

2
apparmor.d/groups/systemd/systemd-hwdb
View file

@ -15,7 +15,7 @@ profile systemd-hwdb @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{lib}/udev/.#hwdb.bin[0-9a-zA-Z]* wl -> @{lib}/udev/#[0-9]*,
@{lib}/udev/.#hwdb.bin[0-9a-zA-Z]* wl -> @{lib}/udev/#@{int},
@{lib}/udev/hwdb.bin w,
/etc/udev/.#hwdb.bind* rw,

8
apparmor.d/groups/systemd/systemd-logind
View file

@ -108,7 +108,7 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
@{run}/systemd/notify rw,
@{run}/systemd/seats/ rw,
@{run}/systemd/seats/.#seat* rw,
@{run}/systemd/seats/seat[0-9]* rw,
@{run}/systemd/seats/seat@{int} rw,
@{run}/systemd/sessions/{,*} rw,
@{run}/systemd/sessions/*.ref rw,
@{run}/systemd/shutdown/.#scheduled* rw,
@ -142,10 +142,10 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
@{PROC}/swaps r,
@{PROC}/sysvipc/{shm,sem,msg} r,
/dev/dri/card[0-9]* rw,
/dev/input/event[0-9]* rw, # Input devices (keyboard, mouse, etc)
/dev/dri/card@{int} rw,
/dev/input/event@{int} rw, # Input devices (keyboard, mouse, etc)
/dev/mqueue/ r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
owner /dev/shm/{,**/} rw,
include if exists <local/systemd-logind>

2
apparmor.d/groups/systemd/systemd-networkd-wait-online
View file

@ -17,7 +17,7 @@ profile systemd-networkd-wait-online @{exec_path} flags=(complain) {
@{exec_path} mr,
@{run}/systemd/netif/links/[0-9]* r,
@{run}/systemd/netif/links/@{int} r,
include if exists <local/systemd-networkd-wait-online>
}

2
apparmor.d/groups/systemd/systemd-sleep-nvidia
View file

@ -27,7 +27,7 @@ profile systemd-sleep-nvidia @{exec_path} {
@{PROC}/driver/nvidia/suspend w,
/dev/tty rw,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/systemd-sleep-nvidia>
}

4
apparmor.d/groups/systemd/systemd-sysusers
View file

@ -40,8 +40,8 @@ profile systemd-sysusers @{exec_path} flags=(attach_disconnected) {
/etc/.#{group,gshadow}[0-9a-zA-Z]* rw,
/etc/.pwd.lock rwk,
/dev/tty[0-9]* rw,
owner /dev/pts/[0-9]* rw,
/dev/tty@{int} rw,
owner /dev/pts/@{int} rw,
# Inherit Silencer

2
apparmor.d/groups/systemd/systemd-tty-ask-password-agent
View file

@ -24,7 +24,7 @@ profile systemd-tty-ask-password-agent @{exec_path} {
@{PROC}/@{pids}/stat r,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/systemd-tty-ask-password-agent>
}

2
apparmor.d/groups/systemd/systemd-udevd
View file

@ -94,7 +94,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
@{run}/systemd/network/ r,
@{run}/systemd/network/*.link rw,
@{run}/systemd/notify rw,
@{run}/systemd/seats/seat[0-9]* r,
@{run}/systemd/seats/seat@{int} r,
@{sys}/** rw,

2
apparmor.d/groups/systemd/systemd-vconsole-setup
View file

@ -34,7 +34,7 @@ profile systemd-vconsole-setup @{exec_path} {
@{sys}/module/vt/parameters/default_utf8 w,
/dev/tty[0-9]* rw,
/dev/tty@{int} rw,
include if exists <local/systemd-vconsole-setup>
}