felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (7)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:59:53 +01:00
parent 7c2c806ffa
commit 2b2c42d23c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
155 changed files with 938 additions and 938 deletions
Download patch file Download diff file Expand all files Collapse all files

44
apparmor.d/profiles-s-z/snapd
View file

@ -60,29 +60,29 @@ profile snapd @{exec_path} {
@{exec_path} mr,
/{usr/,}{s,}bin/adduser rPx,
/{usr/,}{s,}bin/groupadd rPx,
/{usr/,}{s,}bin/useradd rPx,
/{usr/,}bin/cloud-init rPUx, # TODO: rPx ? limited to ubtuntu core, otherwise out of scope
/{usr/,}bin/hostnamectl rPx,
/{usr/,}bin/ssh-keygen rPx,
@{bin}/adduser rPx,
@{bin}/cloud-init rPUx, # TODO: rPx ? limited to ubtuntu core, otherwise out of scope
@{bin}/groupadd rPx,
@{bin}/hostnamectl rPx,
@{bin}/ssh-keygen rPx,
@{bin}/useradd rPx,
/{usr/,}{s,}bin/apparmor_parser rPx,
/{usr/,}{s,}bin/runuser rCx -> runuser,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/cp rix,
/{usr/,}bin/gzip rix,
/{usr/,}bin/journalctl rPx,
/{usr/,}bin/mount rix,
/{usr/,}bin/snap rPx,
/{usr/,}bin/sync rix,
/{usr/,}bin/systemctl rix,
/{usr/,}bin/systemd-detect-virt rPx,
/{usr/,}bin/tar rix,
/{usr/,}bin/udevadm rPx,
/{usr/,}bin/umount rix,
/{usr/,}bin/unsquashfs rix,
/{usr/,}bin/update-desktop-database rPx,
@{bin}/{,ba,da}sh rix,
@{bin}/apparmor_parser rPx,
@{bin}/cp rix,
@{bin}/gzip rix,
@{bin}/journalctl rPx,
@{bin}/mount rix,
@{bin}/runuser rCx -> runuser,
@{bin}/snap rPx,
@{bin}/sync rix,
@{bin}/systemctl rix,
@{bin}/systemd-detect-virt rPx,
@{bin}/tar rix,
@{bin}/udevadm rPx,
@{bin}/umount rix,
@{bin}/unsquashfs rix,
@{bin}/update-desktop-database rPx,
/{snap/snapd/[0-9]*/,}{usr/,}bin/fc-cache-* mr,
/{snap/snapd/[0-9]*/,}{usr/,}bin/snap rPx,