felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update apparmor profiles

Browse source 
Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
This commit is contained in:
Mikhail Morfikov 2022-04-24 11:52:42 +02:00 • committed by Alexandre Pujol
parent 85e7f58d3c
commit 35a281d045
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
28 changed files with 147 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-a-f/atftpd
View file

@ -10,6 +10,8 @@ include <tunables/global>
profile atftpd @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice>
# For libwrap (TCP Wrapper) support
include <abstractions/hosts_access>
# to run atftpd daemon as nobody/nogroup
capability setgid,
@ -21,8 +23,5 @@ profile atftpd @{exec_path} {
/tftpboot/{,**} r,
/srv/tftp/{,**} r,
# for libwrap (TCP Wrapper) support
/etc/hosts.{,allow,deny} r,
include if exists <local/atftpd>
}