felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): clean superfluous openssl abstraction includes

Browse source 
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
This commit is contained in:
Alexandre Pujol 2024-03-12 16:00:44 +00:00
parent d5972cdf1d
commit 467c38724a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
173 changed files with 0 additions and 180 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/pacman/arch-audit
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile arch-audit @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
capability dac_read_search,

1
apparmor.d/groups/pacman/aurpublish
View file

@ -11,7 +11,6 @@ profile aurpublish @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
include <abstractions/openssl>
network inet dgram,
network inet6 dgram,

1
apparmor.d/groups/pacman/paccache
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile paccache @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability dac_read_search,
capability mknod,

2
apparmor.d/groups/pacman/pacman
View file

@ -12,7 +12,6 @@ profile pacman @{exec_path} {
include <abstractions/consoles>
include <abstractions/disks-read>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
capability audit_write,
@ -169,7 +168,6 @@ profile pacman @{exec_path} {
profile gpg {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
capability dac_read_search,

1
apparmor.d/groups/pacman/pacman-hook-mkinitcpio
View file

@ -50,7 +50,6 @@ profile pacman-hook-mkinitcpio @{exec_path} flags=(attach_disconnected) {
profile pacman {
include <abstractions/base>
include <abstractions/openssl>
capability dac_read_search,

1
apparmor.d/groups/pacman/reflector
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile reflector @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/python>
include <abstractions/ssl_certs>