felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (7)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:59:53 +01:00
parent 7c2c806ffa
commit 2b2c42d23c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
155 changed files with 938 additions and 938 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/profiles-s-z/snap
View file

@ -37,10 +37,10 @@ profile snap @{exec_path} {
@{exec_path} mrix,
/{usr/,}bin/mount rix,
@{bin}/mount rix,
/{usr/,}bin/gpg{,2} rCx -> gpg,
/{usr/,}bin/systemctl rPx -> child-systemctl,
@{bin}/gpg{,2} rCx -> gpg,
@{bin}/systemctl rPx -> child-systemctl,
/snap/{,**} rw,
/{snap/snapd/[0-9]*/,}{usr/,}lib/snapd/snap-confine rPx,
@ -85,11 +85,11 @@ profile snap @{exec_path} {
profile gpg {
include <abstractions/base>
/{usr/,}bin/gpg{,2} mr,
@{bin}/gpg{,2} mr,
/{usr/,}bin/dirmngr rix,
/{usr/,}bin/gpg-agent rix,
/{usr/,}bin/gpg-connect-agent rix,
@{bin}/dirmngr rix,
@{bin}/gpg-agent rix,
@{bin}/gpg-connect-agent rix,
owner @{HOME}/.snap/gnupg/ rw,
owner @{HOME}/.snap/gnupg/** rwkl,