felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Basic ZFS support

Browse source
This commit is contained in:
Jeroen Rijken 2022-07-05 20:45:01 +02:00 • committed by Alex
parent 4a37cd1149
commit 3810c1668e
4 changed files with 77 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/profiles-s-z/zfs Normal file
View file

@ -0,0 +1,17 @@
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{local/,}{s,}bin/zfs
profile zfs @{exec_path} flags=(complain) {
include <abstractions/base>
capability sys_admin,
@{exec_path} r,
/dev/zfs rw,
@{PROC}/@{pids}/mounts r,
include if exists <local/zfs>
}

21
apparmor.d/profiles-s-z/zpool Normal file
View file

@ -0,0 +1,21 @@
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{local/,}{s,}bin/zpool
profile zpool @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/disks-read>
capability sys_admin,
@{exec_path} r,
/dev/zfs rw,
@{PROC}/@{pids}/mounts r,
/dev/pts/[0-9]* rw,
/etc/hostid r,
include if exists <local/zfs>
}