felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Profiles update.

Browse source
This commit is contained in:
Alexandre Pujol 2021-12-12 12:41:50 +00:00
parent 16dddf16dc
commit 44aca3ba51
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
24 changed files with 88 additions and 65 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/pacman/pacman
View file

@ -21,6 +21,7 @@ profile pacman @{exec_path} {
capability dac_read_search,
capability fowner,
capability fsetid,
capability mknod,
capability net_admin,
capability setfcap,
capability setgid,
@ -98,7 +99,8 @@ profile pacman @{exec_path} {
owner /var/lib/pacman/{,**} rwl,
owner /tmp/alpm_*/{,**} rw,
owner /tmp/checkup-db-[0-9]*/sync/*.db.part rw,
owner /tmp/checkup-db-[0-9]*/sync/{,*.db.part} rw,
owner /tmp/checkup-db-[0-9]*/db.lck rw,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/stat r,

6
apparmor.d/groups/pacman/pacman-hook-dkms
View file

@ -11,15 +11,17 @@ profile pacman-hook-dkms @{exec_path} {
include <abstractions/base>
capability dac_read_search,
capability mknod,
unix (receive) type=stream,
@{exec_path} mr,
/{usr/,}bin/bash rix,
/{usr/,}bin/kmod rPx,
/{usr/,}bin/dkms rPx,
/{usr/,}bin/kmod rPx,
/{usr/,}bin/nproc rix,
/usr/src/ r,
/usr/src/**.conf r,