update apparmor profiles

Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
This commit is contained in:
Mikhail Morfikov 2021-12-08 12:59:46 +01:00 committed by Alexandre Pujol
parent 44aca3ba51
commit 3430e3df90
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
56 changed files with 146 additions and 45 deletions

View file

@ -10,6 +10,8 @@ include <tunables/global>
profile ntfsclone @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>
include <abstractions/private-files-strict>
include <abstractions/user-download-strict>
capability sys_admin,
@ -18,7 +20,7 @@ profile ntfsclone @{exec_path} {
owner @{PROC}/@{pid}/mounts r,
# A place for backups
@{HOME}/** rwk,
@{HOME}/* rwk,
@{MOUNTS}/*/** rwk,
include if exists <local/ntfsclone>