felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(profile): integration tests.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-30 21:07:47 +02:00
parent 86759f2ef1
commit 41ff05369d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 4 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/groups/utils/chfn
View file

@ -10,19 +10,16 @@ include <tunables/global>
@{exec_path} = @{bin}/chfn @{exec_path} = @{bin}/chfn
profile chfn @{exec_path} { profile chfn @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/authentication>
include <abstractions/bus-system>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/authentication>
include <abstractions/wutmp> include <abstractions/wutmp>
# To write records to the kernel auditing log.
capability audit_write, capability audit_write,
# To set the right permission to the files in the /etc/ dir.
capability chown, capability chown,
capability fsetid, capability fsetid,
capability net_admin,
# chfn is a SETUID binary
capability setuid, capability setuid,
network netlink raw, network netlink raw,

1
apparmor.d/profiles-g-l/landscape-sysinfo
View file

@ -28,6 +28,7 @@ profile landscape-sysinfo @{exec_path} {
@{bin}/who rix, @{bin}/who rix,
@{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/ w, @{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/ w,
@{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/**.pyc w,
@{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/**.pyc.@{u64} w, @{lib}/@{python_name}/dist-packages/landscape/{,**/}__pycache__/**.pyc.@{u64} w,
/var/log/landscape/{,**} rw, /var/log/landscape/{,**} rw,