felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-01-21 11:56:02 +00:00
parent 05b47adb13
commit 42fc4622ed
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
42 changed files with 154 additions and 94 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/profiles-a-f/dmidecode
View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -13,16 +14,11 @@ profile dmidecode @{exec_path} {
@{exec_path} mr,
@{sys}/firmware/dmi/tables/smbios_entry_point r,
@{sys}/firmware/dmi/tables/DMI r,
# The following are needed when the --no-sysfs flag is used
#capability sys_rawio,
#/dev/mem r,
#@{sys}/firmware/efi/systab r,
# For dumping the output to a file
owner /tmp/dump.bin rw,
@{sys}/firmware/dmi/tables/DMI r,
@{sys}/firmware/dmi/tables/smbios_entry_point r,
@{sys}/firmware/efi/systab r,
include if exists <local/dmidecode>
}

2
apparmor.d/profiles-a-f/flatpak-system-helper
View file

@ -56,12 +56,14 @@ profile flatpak-system-helper @{exec_path} {
@{bin}/gpgconf mr,
@{bin}/gpgsm mr,
@{lib}/gnupg/scdaemon rix,
@{bin}/gpg-agent rix,
owner /tmp/ostree-gpg-*/ r,
owner /tmp/ostree-gpg-*/** rwkl -> /tmp/ostree-gpg-*/**,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
}