felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(profile): firt set of issues raised by the integration tests

Browse source
This commit is contained in:
Alexandre Pujol 2024-10-21 22:00:02 +01:00
parent 48738a4cae
commit 2823f7562b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
5 changed files with 11 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-a-f/aa-enforce
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/aa-enforce @{bin}/aa-complain @{bin}/aa-audit
@{exec_path} = @{bin}/aa-enforce @{bin}/aa-complain @{bin}/aa-audit @{bin}/aa-disable
profile aa-enforce @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>

5
apparmor.d/profiles-a-f/blkid
View file

@ -23,6 +23,8 @@ profile blkid @{exec_path} flags=(attach_disconnected) {
@{etc_rw}/blkid.tab{,-@{rand6}} rw,
@{etc_rw}/blkid.tab.old rwl -> /etc/blkid.tab,
/.ismount-test-file rw,
# Image files
@{user_img_dirs}/{,**} r,
@ -34,8 +36,9 @@ profile blkid @{exec_path} flags=(attach_disconnected) {
@{run}/cloud-init/ds-identify.log w, # file_inherit
# For the EVALUATE=scan method
@{PROC}/@{pid}/mounts r,
@{PROC}/partitions r,
@{PROC}/swaps r,
owner /dev/tty@{int} rw,