felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (7)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:59:53 +01:00
parent 7c2c806ffa
commit 2b2c42d23c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
155 changed files with 938 additions and 938 deletions
Download patch file Download diff file Expand all files Collapse all files

60
apparmor.d/profiles-s-z/update-ca-certificates
View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{s,}bin/update-ca-certificates
@{exec_path} = @{bin}/update-ca-certificates
profile update-ca-certificates @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
@ -15,28 +15,28 @@ profile update-ca-certificates @{exec_path} {
include <abstractions/ssl_certs>
@{exec_path} r,
/{usr/,}bin/{,ba,da}sh rix,
@{bin}/{,ba,da}sh rix,
/{usr/,}bin/basename rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/chmod rix,
/{usr/,}bin/find rix,
/{usr/,}bin/flock rix,
/{usr/,}bin/ln rix,
/{usr/,}bin/mktemp rix,
/{usr/,}bin/mv rix,
/{usr/,}bin/readlink rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/sort rix,
/{usr/,}bin/test rix,
/{usr/,}bin/wc rix,
@{bin}/basename rix,
@{bin}/cat rix,
@{bin}/chmod rix,
@{bin}/find rix,
@{bin}/flock rix,
@{bin}/ln rix,
@{bin}/mktemp rix,
@{bin}/mv rix,
@{bin}/readlink rix,
@{bin}/rm rix,
@{bin}/sed rix,
@{bin}/sort rix,
@{bin}/test rix,
@{bin}/wc rix,
/{usr/,}bin/openssl rix,
@{bin}/openssl rix,
/etc/ca-certificates/update.d/ r,
/etc/ca-certificates/update.d/jks-keystore rCx -> jks-keystore,
/{usr/,}bin/run-parts rCx -> run-parts,
@{bin}/run-parts rCx -> run-parts,
/etc/ r,
/etc/ca-certificates.conf r,
@ -44,7 +44,7 @@ profile update-ca-certificates @{exec_path} {
/etc/ssl/certs/*.pem rw,
/etc/ssl/certs/@{hex}.[0-9] rw,
/{usr/,}lib/locale/locale-archive r,
@{lib}/locale/locale-archive r,
/tmp/ r,
owner /tmp/ca-certificates{,.crt}.tmp.* rw,
@ -57,7 +57,7 @@ profile update-ca-certificates @{exec_path} {
profile run-parts {
include <abstractions/base>
/{usr/,}bin/run-parts mr,
@{bin}/run-parts mr,
/etc/ca-certificates/update.d/ r,
@ -74,21 +74,21 @@ profile update-ca-certificates @{exec_path} {
/etc/ca-certificates/update.d/jks-keystore mr,
/{usr/,}lib/ r,
/{usr/,}lib/jvm/java-[0-9]*-openjdk-*/jre/bin/java rix,
/{usr/,}lib/jvm/java-[0-9]*-openjdk-*/bin/java rix,
/{usr/,}lib/jvm/java-[0-9]*-openjdk-*/lib/server/classes.jsa mr,
@{lib}/ r,
@{lib}/jvm/java-[0-9]*-openjdk-*/jre/bin/java rix,
@{lib}/jvm/java-[0-9]*-openjdk-*/bin/java rix,
@{lib}/jvm/java-[0-9]*-openjdk-*/lib/server/classes.jsa mr,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/head rix,
/{usr/,}bin/mountpoint rix,
@{bin}/{,ba,da}sh rix,
@{bin}/sed rix,
@{bin}/head rix,
@{bin}/mountpoint rix,
# Do not strip env to avoid errors like the following:
# ERROR: ld.so: object 'libfakeroot-sysv.so' from LD_PRELOAD cannot be preloaded (cannot open
# shared object file): ignored.
/{usr/,}bin/dpkg-query rpx,
@{bin}/dpkg-query rpx,
#
/{usr/,}bin/dpkg rPx -> child-dpkg,
@{bin}/dpkg rPx -> child-dpkg,
/usr/share/ca-certificates-java/ca-certificates-java.jar r,
/usr/share/java/java-atk-wrapper.jar r,