felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): clean superfluous openssl abstraction includes

Browse source 
apparmor.d equivalent of https://gitlab.com/apparmor/apparmor/-/merge_requests/1179
This commit is contained in:
Alexandre Pujol 2024-03-12 16:00:44 +00:00
parent d5972cdf1d
commit 467c38724a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
173 changed files with 0 additions and 180 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/virt/cockpit-bridge
View file

@ -12,7 +12,6 @@ profile cockpit-bridge @{exec_path} {
include <abstractions/app-launcher-root>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/python>
capability dac_read_search,

1
apparmor.d/groups/virt/cockpit-certificate-helper
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile cockpit-certificate-helper @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
@{exec_path} mr,

1
apparmor.d/groups/virt/libvirt-dbus
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile libvirt-dbus @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
@{exec_path} mr,

1
apparmor.d/groups/virt/libvirtd
View file

@ -22,7 +22,6 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
include <abstractions/devices-usb>
include <abstractions/disks-write>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability audit_write,
capability bpf,

1
apparmor.d/groups/virt/virt-aa-helper
View file

@ -10,7 +10,6 @@ include <tunables/global>
@{exec_path} = @{lib}/libvirt/virt-aa-helper
profile virt-aa-helper @{exec_path} {
include <abstractions/base>
include <abstractions/openssl>
capability dac_override,
capability dac_read_search,

1
apparmor.d/groups/virt/virtinterfaced
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile virtinterfaced @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
network netlink raw,

1
apparmor.d/groups/virt/virtlogd
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile virtlogd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
ptrace (read) peer=libvirtd,
ptrace (read) peer=unconfined,

1
apparmor.d/groups/virt/virtnetworkd
View file

@ -9,7 +9,6 @@ include <tunables/global>
@{exec_path} = @{bin}/virtnetworkd
profile virtnetworkd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/openssl>
include <abstractions/nameservice-strict>
network netlink raw,

1
apparmor.d/groups/virt/virtnodedevd
View file

@ -13,7 +13,6 @@ profile virtnodedevd @{exec_path} flags=(attach_disconnected) {
include <abstractions/disks-read>
include <abstractions/freedesktop.org>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability net_admin,
capability sys_admin,

1
apparmor.d/groups/virt/virtsecretd
View file

@ -10,7 +10,6 @@ include <tunables/global>
profile virtsecretd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
network netlink raw,

1
apparmor.d/groups/virt/virtstoraged
View file

@ -12,7 +12,6 @@ include <tunables/global>
profile virtstoraged @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
capability dac_read_search,