felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Use abstractions where possible

Browse source
This commit is contained in:
doublez13 2025-09-04 07:46:04 -06:00 • committed by GitHub
parent 1be6a2f069
commit 35db878a36
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-g-l/kdestroy
View file

@ -9,16 +9,13 @@ include <tunables/global>
@{exec_path} = @{bin}/kdestroy @{exec_path} = @{bin}/kdestroy
profile kdestroy @{exec_path} { profile kdestroy @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/kerberosclient>
#Allow root to destroy other users' creds cache #Allow root to destroy other users' creds cache
capability dac_override, capability dac_override,
@{exec_path} mr, @{exec_path} mr,
#Config Files
/etc/krb5.conf r,
/etc/krb5.conf.d/{,**} r,
#Credentials cache #Credentials cache
/tmp/krb5cc_* rwk, /tmp/krb5cc_* rwk,
/tmp/tkt* rwk, /tmp/tkt* rwk,