felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): cron: cleanup direct exec.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-25 01:39:00 +02:00
parent 774106b7e5
commit 30bbd6d56a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 1 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/cron/cron
View file

@ -38,9 +38,7 @@ profile cron @{exec_path} flags=(attach_disconnected) {
@{bin}/run-parts rCx -> run-parts, # could even be rix, as long as we are not
# using the run-parts profile we are good
@{lib}/@{multiarch}/e2fsprogs/e2scrub_all_cron rPUx,
@{lib}/sysstat/debian-sa1 rPUx,
/usr/share/rsync/scripts/rrsync rPUx,
@{lib}/sysstat/debian-sa1 rPx,
/etc/cron.d/{,*} r,
/etc/crontab r,