felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve makepkg.

Browse source
This commit is contained in:
Alexandre Pujol 2025-02-23 18:16:27 +01:00
parent d51826542b
commit 2f5637bd65
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/groups/pacman/makepkg
View file

@ -28,14 +28,20 @@ profile makepkg @{exec_path} {
file,
@{bin}/gpg{,2} Cx -> gpg,
@{bin}/gpgconf Cx -> gpg,
@{bin}/gpgsm Cx -> gpg,
@{bin}/sudo Cx -> sudo,
@{bin}/gpg{,2} Cx -> gpg,
@{bin}/gpgconf Cx -> gpg,
@{bin}/gpgsm Cx -> gpg,
@{bin}/sudo Cx -> sudo,
deny capability sys_ptrace,
deny ptrace read,
profile gpg {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/devices-usb>
network netlink raw,
@{bin}/gpg{,2} mr,
@{bin}/gpgconf mr,