feat(profiles): better integration with openSUSE.

See #134
This commit is contained in:
Alexandre Pujol 2023-03-27 22:22:36 +01:00
parent 4ca3ced1a5
commit 41766ebd2a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
20 changed files with 82 additions and 30 deletions

View file

@ -16,6 +16,8 @@ profile gpgsm @{exec_path} {
@{exec_path} mr,
/usr/share/gnupg/* r,
/etc/gcrypt/hwf.deny r,
deny /usr/bin/.gnupg/ w,

View file

@ -24,6 +24,8 @@ profile scdaemon @{exec_path} {
owner @{run}/user/@{uid}/gnupg/S.scdaemon rw,
owner @{run}/user/@{uid}/gnupg/d.*/S.scdaemon rw,
owner /var/tmp/zypp.??????/zypp-trusted-*/S.scdaemon w,
@{PROC}/@{pid}/task/@{tid}/comm rw,
@{sys}/devices/pci[0-9]*/**/bConfigurationValue r,