feat(profile): add some ubuntu specific profiles.

This commit is contained in:
Alexandre Pujol 2025-05-29 23:33:37 +02:00
parent 7f684ee5dd
commit 38c6e35a1b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 99 additions and 0 deletions

View file

@ -0,0 +1,39 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = /usr/lib/ubuntu-advantage/apt_news.py
profile apt_news @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/common/apt>
include <abstractions/nameservice-strict>
include <abstractions/python>
capability chown,
capability kill,
capability setgid,
capability setuid,
signal send set=int peer=apt-methods-*,
@{exec_path} mr,
@{lib}/apt/methods/* Px,
/etc/ubuntu-advantage/uaclient.conf r,
@{run}/ubuntu-advantage/ rw,
@{run}/ubuntu-advantage/apt-news/{,**} rw,
owner @{run}/ubuntu-advantage/apt-news/** rw,
@{PROC}/@{pid}/fd/ r,
include if exists <local/apt_news>
}
# vim:syntax=apparmor