update apparmor profiles
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
This commit is contained in:
parent
44aca3ba51
commit
3430e3df90
56 changed files with 146 additions and 45 deletions
|
|
@ -1,6 +1,6 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2019-2021 Mikhail Morfikov
|
||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
|
|
@ -48,7 +48,8 @@ profile kmod @{exec_path} flags=(attach_disconnected) {
|
|||
# Initframs
|
||||
owner /tmp/mkinitcpio.*/{,**} rw,
|
||||
|
||||
#owner @{PROC}/@{pid}/fd/1 w,
|
||||
owner @{run}/tmpfiles.d/ w,
|
||||
owner @{run}/tmpfiles.d/static-nodes.conf w,
|
||||
|
||||
# For local kernel build
|
||||
owner /tmp/depmod.*/lib/modules/*/ r,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue