felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-17 23:47:16 +00:00
parent f362975ce7
commit 4032ead9b4
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
21 changed files with 40 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/groups/network/netplan.script
View file

@ -16,20 +16,21 @@ profile netplan.script @{exec_path} flags=(attach_disconnected) {
@{lib}/netplan/generate rix,
@{bin}/udevadm rCx -> udevadm,
@{bin}/systemctl rCx -> systemctl,
/usr/share/netplan/{,**} r,
/etc/netplan/{,*} r,
@{run}/NetworkManager/conf.d/10-globally-managed-devices.conf w,
@{run}/NetworkManager/conf.d/10-globally-managed-devices.conf{,.@{rand6}} w,
@{run}/NetworkManager/system-connections/ r,
@{run}/NetworkManager/system-connections/netplan-*.nmconnection w,
@{run}/NetworkManager/system-connections/netplan-*.nmconnection{,.@{rand6}} w,
@{run}/systemd/system/ r,
@{run}/systemd/system/netplan-* rw,
@{run}/systemd/system/systemd-networkd.service.wants/ r,
@{run}/systemd/system/systemd-networkd.service.wants/netplan-*.service rw,
@{run}/udev/rules.d/ r,
@{run}/udev/rules.d/90-netplan.rules{,.@{rand6}} rw,
profile udevadm {
include <abstractions/base>
@ -39,11 +40,21 @@ profile netplan.script @{exec_path} flags=(attach_disconnected) {
/etc/udev/udev.conf r,
@{run}/udev/control rw,
@{run}/udev/rules.d/90-netplan.rules rw,
@{run}/udev/rules.d/90-netplan.rules.@{rand6} rw,
include if exists <local/netplan.script_udevadm>
}
profile systemctl {
include <abstractions/base>
include <abstractions/systemd-common>
@{bin}/systemctl mr,
include if exists <local/netplan.script_systemctl>
}
include if exists <local/netplan.script>
}

5
apparmor.d/groups/network/nm-online
View file

@ -12,6 +12,11 @@ profile nm-online @{exec_path} {
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.NetworkManager>
dbus receive bus=system path=/org/freedesktop/NetworkManager/ActiveConnection/@{int}
interface=org.freedesktop.NetworkManager.Connection.Active
member=StateChanged
peer=(name=:*, label=NetworkManager),
@{exec_path} mr,
include if exists <local/nm-online>