felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use the new @{tmp} variable.

Browse source 
It is only used with the owner statement.
This commit is contained in:
Alexandre Pujol 2024-05-02 22:12:02 +01:00
parent 0bbbe71422
commit 3f69b9fec4
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
257 changed files with 668 additions and 685 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/profiles-a-f/check-support-status-hook
View file

@ -40,8 +40,8 @@ profile check-support-status-hook @{exec_path} {
/root/ r,
/tmp/ r,
owner /tmp/debian-security-support.postinst.*/ rw,
owner /tmp/debian-security-support.postinst.*/output rw,
owner @{tmp}/debian-security-support.postinst.*/ rw,
owner @{tmp}/debian-security-support.postinst.*/output rw,
/var/lib/ r,
/var/lib/debian-security-support/ r,
@ -56,7 +56,7 @@ profile check-support-status-hook @{exec_path} {
@{bin}/perl r,
/tmp/ r,
owner /tmp/debian-security-support.postinst.*/output r,
owner @{tmp}/debian-security-support.postinst.*/output r,
}
@ -123,7 +123,7 @@ profile check-support-status-hook @{exec_path} {
@{etc_ro}/security/limits.d/ r,
/tmp/ r,
owner /tmp/debian-security-support.postinst.*/output w,
owner @{tmp}/debian-security-support.postinst.*/output w,
}
include if exists <local/check-support-status-hook>