felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add more programs to the list of sbin program.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-01 15:17:03 +02:00
parent dc816178f5
commit 3a568ba307
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
44 changed files with 338 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/filesystem/btrfs-convert
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/btrfs-convert
@{exec_path} = @{sbin}/btrfs-convert
profile btrfs-convert @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/btrfs-image
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/btrfs-image
@{exec_path} = @{sbin}/btrfs-image
profile btrfs-image @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/btrfstune
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/btrfstune
@{exec_path} = @{sbin}/btrfstune
profile btrfstune @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

4
apparmor.d/groups/filesystem/mount-nfs
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/mount.nfs
@{exec_path} = @{sbin}/mount.nfs
profile mount-nfs @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/nameservice-strict>
@ -42,7 +42,7 @@ profile mount-nfs @{exec_path} flags=(complain) {
@{sh_path} rix,
@{bin}/flock rix,
@{bin}/start-statd rix,
@{sbin}/start-statd rix,
@{bin}/systemctl rCx -> systemctl,
/etc/fstab r,

2
apparmor.d/groups/filesystem/nfsdcld
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/nfsdcld
@{exec_path} = @{sbin}/nfsdcld
profile nfsdcld @{exec_path} {
include <abstractions/base>