felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add pgrep.

Browse source
This commit is contained in:
Alexandre Pujol 2024-05-30 21:08:03 +01:00
parent 3f688be7a0
commit 45ae8f5d27
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 38 additions and 42 deletions
Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/profiles-g-l/kanyremote
View file

@ -90,14 +90,7 @@ profile kanyremote @{exec_path} {
profile pgrep {
include <abstractions/base>
include <abstractions/consoles>
@{bin}/pgrep mr,
# The /proc/ dir and the cmdline file have to be radable to avoid pgrep segfault.
@{PROC}/ r,
@{PROC}/@{pids}/cmdline r,
deny @{PROC}/sys/kernel/osrelease r,
include <abstractions/app/pgrep>
/usr/share/anyremote/{,**} r,

10
apparmor.d/profiles-g-l/logrotate
View file

@ -97,14 +97,8 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
profile pgrep {
include <abstractions/base>
@{bin}/pgrep mr,
# The /proc/ dir and the cmdline file have to be radable to avoid pgrep segfault.
@{PROC}/ r,
@{PROC}/@{pids}/cmdline r,
@{PROC}/sys/kernel/osrelease r,
include <abstractions/app/pgrep>
include if exists <local/logrotate_pgrep>
}