felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(tunable): add @{editor_path} & @{pager_path}.

Browse source
This commit is contained in:
Alexandre Pujol 2024-09-08 13:25:49 +01:00
parent 4f310b8802
commit 2af1d06f18
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
35 changed files with 63 additions and 124 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/systemd/bootctl
View file

@ -22,9 +22,7 @@ profile bootctl @{exec_path} {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
/{boot,efi}/ r,
/{boot,efi}/EFI/{,**} r,

4
apparmor.d/groups/systemd/busctl
View file

@ -37,9 +37,7 @@ profile busctl @{exec_path} {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
@{PROC}/@{pid}/cgroup r,
@{PROC}/@{pid}/comm r,

4
apparmor.d/groups/systemd/coredumpctl
View file

@ -22,9 +22,7 @@ profile coredumpctl @{exec_path} flags=(complain) {
@{bin}/gdb rCx -> gdb,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
/var/lib/dbus/machine-id r,
/etc/machine-id r,

4
apparmor.d/groups/systemd/journalctl
View file

@ -25,9 +25,7 @@ profile journalctl @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
/var/lib/dbus/machine-id r,
/etc/machine-id r,

4
apparmor.d/groups/systemd/localectl
View file

@ -15,9 +15,7 @@ profile localectl @{exec_path} {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
/usr/share/kbd/keymaps/{,**} r,

4
apparmor.d/groups/systemd/loginctl
View file

@ -19,9 +19,7 @@ profile loginctl @{exec_path} {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
include if exists <local/loginctl>
}

4
apparmor.d/groups/systemd/networkctl
View file

@ -35,9 +35,7 @@ profile networkctl @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
/etc/udev/hwdb.bin r,
/var/lib/dbus/machine-id r,

4
apparmor.d/groups/systemd/systemd-analyze
View file

@ -28,9 +28,7 @@ profile systemd-analyze @{exec_path} {
@{lib}/systemd/system-environment-generators/* rix,
@{bin}/pager rPx -> child-pager,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{pager_path} rPx -> child-pager,
@{bin}/man rPx,
/usr/ r,

4
apparmor.d/groups/systemd/systemd-cgls
View file

@ -14,9 +14,7 @@ profile systemd-cgls @{exec_path} {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
@{sys}/fs/cgroup/{,**} r,

4
apparmor.d/groups/systemd/systemd-cgtop
View file

@ -14,9 +14,7 @@ profile systemd-cgtop @{exec_path} {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
@{sys}/fs/cgroup/{,**} r,

4
apparmor.d/groups/systemd/systemd-dissect
View file

@ -25,9 +25,7 @@ profile systemd-dissect @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{bin}/fsck rPx,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
# Location of file system OS images
@{user_build_dirs}/{,**} r,

4
apparmor.d/groups/systemd/systemd-mount
View file

@ -13,9 +13,7 @@ profile systemd-mount @{exec_path} {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
@{sys}/bus/ r,
@{sys}/class/ r,

4
apparmor.d/groups/systemd/systemd-udevd
View file

@ -37,6 +37,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
@{sh_path} rix,
@{coreutils_path} rix,
@{pager_path} rPx -> child-pager,
@{bin}/*-print-pci-ids rix,
@{bin}/alsactl rPUx,
@{bin}/ddcutil rPx,
@ -44,16 +45,13 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
@{bin}/ethtool rix,
@{bin}/issue-generator rPx,
@{bin}/kmod rPx,
@{bin}/less rPx -> child-pager,
@{bin}/logger rix,
@{bin}/ls rix,
@{bin}/lvm rPx,
@{bin}/mknod rix,
@{bin}/more rPx -> child-pager,
@{bin}/multipath rPx,
@{bin}/nfsrahead rix,
@{bin}/nvidia-modprobe rPx -> child-modprobe-nvidia,
@{bin}/pager rPx -> child-pager,
@{bin}/perl rix,
@{bin}/setfacl rix,
@{bin}/sg_inq rix,

4
apparmor.d/groups/systemd/userdbctl
View file

@ -16,9 +16,7 @@ profile userdbctl @{exec_path} {
@{exec_path} mr,
@{bin}/less rPx -> child-pager,
@{bin}/more rPx -> child-pager,
@{bin}/pager rPx -> child-pager,
@{pager_path} rPx -> child-pager,
/etc/shadow r,
/etc/gshadow r,