felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-03-03 12:20:10 +00:00
parent 0b0d58ab03
commit 3ff8e3847d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
37 changed files with 95 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/profiles-s-z/sbctl
View file

@ -32,5 +32,9 @@ profile sbctl @{exec_path} {
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
# File Inherit
deny network inet stream,
deny network inet6 stream,
include if exists <local/sbctl>
}

1
apparmor.d/profiles-s-z/virt-manager
View file

@ -89,6 +89,7 @@ profile virt-manager @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/c4[0-9]*:[0-9]* r,
@{run}/udev/data/c5[0-9]*:[0-9]* r,
@{sys}/devices/**/hwmon/**/{,name,temp*,fan*} r,
@{sys}/devices/pci[0-9]*/**/drm/ r,
@{sys}/devices/virtual/drm/ttm/uevent r,

7
apparmor.d/profiles-s-z/wpa-supplicant
View file

@ -50,9 +50,10 @@ profile wpa-supplicant @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/pci[0-9]*/**/ieee80211/phy[0-9]/name r,
@{PROC}/sys/net/ipv[4,6]/conf/wlan[0-9]/drop_* rw,
@{PROC}/sys/net/ipv[4,6]/conf/wlo*/drop_* rw,
@{PROC}/sys/net/ipv[4,6]/conf/wlp*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/p2p*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlo*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/drop_* rw,
/dev/rfkill rw,