felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Replace shells with new sh_path variable

Browse source 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
This commit is contained in:
Jeroen Rijken 2024-02-11 15:34:46 +01:00 • committed by Alex
parent 3b1b187d13
commit 40b171ee94
315 changed files with 415 additions and 369 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-m-r/mdevctl
View file

@ -11,6 +11,11 @@ profile mdevctl @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
@{bin}/basename rix,
@{bin}/find rix,
@{bin}/getopt rix,
@{bin}/jq rix,
@{bin}/sort rix,
/etc/mdevctl.d/{,**} r,

2
apparmor.d/profiles-m-r/mediainfo-gui
View file

@ -30,7 +30,7 @@ profile mediainfo-gui @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

4
apparmor.d/profiles-m-r/megasync
View file

@ -33,7 +33,7 @@ profile megasync @{exec_path} {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/{m,g,}awk rix,
@ -90,7 +90,7 @@ profile megasync @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

4
apparmor.d/profiles-m-r/minitube
View file

@ -99,7 +99,7 @@ profile minitube @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,
@ -122,7 +122,7 @@ profile minitube @{exec_path} {
@{bin}/xdg-screensaver mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/mv rix,
@{bin}/{,e}grep rix,
@{bin}/sed rix,

2
apparmor.d/profiles-m-r/mke2fs
View file

@ -18,7 +18,7 @@ profile mke2fs @{exec_path} {
@{exec_path} mr,
# To check for badblocks
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/badblocks rPx,
/usr/share/file/misc/magic.mgc r,

6
apparmor.d/profiles-m-r/mkinitramfs
View file

@ -19,7 +19,7 @@ profile mkinitramfs @{exec_path} {
capability fsetid,
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/ r,
@{lib}/ r,
@ -100,7 +100,7 @@ profile mkinitramfs @{exec_path} {
@{bin}/ldd mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/kmod mr,
@{lib}/initramfs-tools/bin/* mr,
@ -118,7 +118,7 @@ profile mkinitramfs @{exec_path} {
@{bin}/ldconfig mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/ldconfig.real rix,
owner /var/tmp/mkinitramfs_*/etc/ld.so.conf r,

2
apparmor.d/profiles-m-r/modprobed-db
View file

@ -13,7 +13,7 @@ profile modprobed-db @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/cat rix,
@{bin}/cp rix,
@{bin}/cut rix,

2
apparmor.d/profiles-m-r/molly-guard
View file

@ -17,7 +17,7 @@ profile molly-guard @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e,p}grep rix,
@{bin}/hostname rix,
@{bin}/run-parts rix,

2
apparmor.d/profiles-m-r/monitorix
View file

@ -34,7 +34,7 @@ profile monitorix @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/df rix,
@{bin}/cat rix,

2
apparmor.d/profiles-m-r/mount-nfs
View file

@ -40,7 +40,7 @@ profile mount-nfs @{exec_path} flags=(complain) {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/flock rix,
@{bin}/start-statd rix,

2
apparmor.d/profiles-m-r/mpv
View file

@ -92,7 +92,7 @@ profile mpv @{exec_path} {
@{bin}/xdg-screensaver mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/mv rix,
@{bin}/{,e}grep rix,
@{bin}/sed rix,

2
apparmor.d/profiles-m-r/mumble
View file

@ -84,7 +84,7 @@ profile mumble @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-m-r/mumble-overlay
View file

@ -13,7 +13,7 @@ profile mumble-overlay @{exec_path} {
include <abstractions/consoles>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/file rix,
@{bin}/which{,.debianutils} rix,

2
apparmor.d/profiles-m-r/needrestart
View file

@ -24,7 +24,7 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/dpkg-query rpx,
@{bin}/fail2ban-server rPx,
@{bin}/locale rix,

2
apparmor.d/profiles-m-r/needrestart-apt-pinvoke
View file

@ -15,7 +15,7 @@ profile needrestart-apt-pinvoke @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/dbus-send rix,
@{bin}/needrestart rPx,
@{bin}/rm rix,

2
apparmor.d/profiles-m-r/needrestart-dpkg-status
View file

@ -15,7 +15,7 @@ profile needrestart-dpkg-status @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/mkdir rix,
@{bin}/touch rix,

2
apparmor.d/profiles-m-r/needrestart-iucode-scan-versions
View file

@ -13,7 +13,7 @@ profile needrestart-iucode-scan-versions @{exec_path} {
@{exec_path} mr,
@{bin}/iucode_tool rix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/bsdtar rix,
@{bin}/cat rix,

2
apparmor.d/profiles-m-r/on-ac-power
View file

@ -12,7 +12,7 @@ profile on-ac-power @{exec_path} {
include <abstractions/base>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/cat rix,

2
apparmor.d/profiles-m-r/openbox
View file

@ -57,7 +57,7 @@ profile openbox @{exec_path} {
@{lib}/@{multiarch}/openbox-autostart mr,
@{lib}/@{multiarch}/openbox-xdg-autostart rix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/which{,.debianutils} rix,
# Apps allowed to run

2
apparmor.d/profiles-m-r/openbox-session
View file

@ -12,7 +12,7 @@ profile openbox-session @{exec_path} {
include <abstractions/base>
@{exec_path} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/xprop rPx,
@{bin}/openbox rPx,

2
apparmor.d/profiles-m-r/orage
View file

@ -50,7 +50,7 @@ profile orage @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-m-r/os-prober
View file

@ -18,7 +18,7 @@ profile os-prober @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{e,f,}grep rix,
@{bin}/blkid rPx,
@{bin}/btrfs rPx,

2
apparmor.d/profiles-m-r/packagekitd
View file

@ -51,7 +51,7 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
@{bin}/gpgconf rCx -> gpg,
@{bin}/gpgsm rCx -> gpg,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/cp rix,
@{bin}/echo rix,
@{bin}/gdbus rix,

2
apparmor.d/profiles-m-r/pam-auth-update
View file

@ -39,7 +39,7 @@ profile pam-auth-update @{exec_path} flags=(complain) {
@{bin}/pam-auth-update rPx,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/stty rix,
@{bin}/locale rix,

2
apparmor.d/profiles-m-r/parted
View file

@ -28,7 +28,7 @@ profile parted @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/udevadm rCx -> udevadm,

2
apparmor.d/profiles-m-r/partprobe
View file

@ -27,7 +27,7 @@ profile partprobe @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/udevadm rCx -> udevadm,

2
apparmor.d/profiles-m-r/pass
View file

@ -14,7 +14,7 @@ profile pass @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/base64 rix,
@{bin}/cat rix,
@{bin}/cp rix,

2
apparmor.d/profiles-m-r/pinentry
View file

@ -14,7 +14,7 @@ profile pinentry @{exec_path} {
@{exec_path} mr,
@{bin}/pinentry-* rPx,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
/etc/pinentry/preexec r,

2
apparmor.d/profiles-m-r/pinentry-curses
View file

@ -13,7 +13,7 @@ profile pinentry-curses @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
/usr/share/terminfo/** r,

2
apparmor.d/profiles-m-r/popcon-largest-unused
View file

@ -15,7 +15,7 @@ profile popcon-largest-unused @{exec_path} {
@{exec_path} r,
@{bin}/perl r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/sort rix,
@{bin}/cut rix,

2
apparmor.d/profiles-m-r/popularity-contest
View file

@ -25,7 +25,7 @@ profile popularity-contest @{exec_path} {
@{exec_path} r,
@{bin}/perl r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/env rix,
# Do not strip env to avoid errors like the following:

2
apparmor.d/profiles-m-r/protonmail-bridge
View file

@ -50,7 +50,7 @@ profile protonmail-bridge @{exec_path} {
@{bin}/pass mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/base64 rix,
@{bin}/dirname rix,
@{bin}/env rix,

2
apparmor.d/profiles-m-r/psi
View file

@ -118,7 +118,7 @@ profile psi @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-m-r/psi-plus
View file

@ -117,7 +117,7 @@ profile psi-plus @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-m-r/qnapi
View file

@ -89,7 +89,7 @@ profile qnapi @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-m-r/qtox
View file

@ -76,7 +76,7 @@ profile qtox @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-m-r/quiterss
View file

@ -83,7 +83,7 @@ profile quiterss @{exec_path} {
@{bin}/xdg-open mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,

2
apparmor.d/profiles-m-r/repo
View file

@ -28,7 +28,7 @@ profile repo @{exec_path} {
@{bin}/ r,
@{bin}/env rix,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/uname rix,
@{bin}/git rix,

2
apparmor.d/profiles-m-r/resolvconf
View file

@ -13,7 +13,7 @@ profile resolvconf @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/cat rix,
@{bin}/flock rix,
@{bin}/mkdir rix,

6
apparmor.d/profiles-m-r/run-parts
View file

@ -16,7 +16,7 @@ profile run-parts @{exec_path} {
@{exec_path} mr,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/anacron rix,
@{bin}/cat rix,
@{bin}/date rix,
@ -147,7 +147,7 @@ profile run-parts @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{e,}grep rix,
@{bin}/cat rix,
@{bin}/cut rix,
@ -188,7 +188,7 @@ profile run-parts @{exec_path} {
capability sys_module,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/{,e}grep rix,
@{bin}/{,m,g}awk rix,
@{bin}/cat rix,

6
apparmor.d/profiles-m-r/rustdesk
View file

@ -38,7 +38,7 @@ profile rustdesk @{exec_path} {
@{bin}/ls rix,
@{bin}/python3.@{int} rPx -> rustdesk_python,
@{bin}/{,ba,da}sh rPx -> rustdesk_shell,
@{sh_path} rPx -> rustdesk_shell,
/etc/gdm{,3}/custom.conf r,
@ -167,7 +167,7 @@ profile rustdesk_python {
@{bin}/python3.@{int} r,
@{bin}/{,ba,da}sh rix,
@{sh_path} rix,
@{bin}/chmod rix,
@{bin}/uname rPx,
/usr/share/rustdesk/files/pynput_service.py rPx,
@ -198,7 +198,7 @@ profile rustdesk_shell {
ptrace (read),
@{bin}/{,ba,da}sh r,
@{sh_path} r,
@{bin}/tr rix,
@{bin}/{,e}grep rix,