update apparmor profiles
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
This commit is contained in:
parent
44aca3ba51
commit
3430e3df90
56 changed files with 146 additions and 45 deletions
|
|
@ -10,6 +10,8 @@ include <tunables/global>
|
|||
profile ntfsclone @{exec_path} {
|
||||
include <abstractions/base>
|
||||
include <abstractions/disks-write>
|
||||
include <abstractions/private-files-strict>
|
||||
include <abstractions/user-download-strict>
|
||||
|
||||
capability sys_admin,
|
||||
|
||||
|
|
@ -18,7 +20,7 @@ profile ntfsclone @{exec_path} {
|
|||
owner @{PROC}/@{pid}/mounts r,
|
||||
|
||||
# A place for backups
|
||||
@{HOME}/** rwk,
|
||||
@{HOME}/* rwk,
|
||||
@{MOUNTS}/*/** rwk,
|
||||
|
||||
include if exists <local/ntfsclone>
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue