felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): replace old [0-9]* glob by @{int}

Browse source 
Beware some [0-9]* glob are actually not proper @{int}.
This commit is contained in:
Alexandre Pujol 2023-08-18 17:09:53 +01:00
parent 8ea4491a56
commit 275d6b6e62
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
368 changed files with 637 additions and 636 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/profiles-s-z/spectre-meltdown-checker
View file

@ -11,7 +11,7 @@ profile spectre-meltdown-checker @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
# Needed to read the /dev/cpu/[0-9]*/msr device
# Needed to read the /dev/cpu/@{int}/msr device
capability sys_rawio,
# Needed to read system logs
@ -84,8 +84,8 @@ profile spectre-meltdown-checker @{exec_path} {
/tmp/ r,
owner /tmp/{config,kernel}-* rw,
owner /dev/cpu/[0-9]*/cpuid r,
owner /dev/cpu/[0-9]*/msr rw,
owner /dev/cpu/@{int}/cpuid r,
owner /dev/cpu/@{int}/msr rw,
owner /dev/kmsg r,
/boot/ r,