felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): various core update.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-09 23:04:32 +01:00
parent 7badf80854
commit 47b6e3c616
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 30 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/utils/agetty
View file

@ -20,6 +20,8 @@ profile agetty @{exec_path} {
network netlink raw,
signal receive set=hup peer=@{p_systemd},
@{exec_path} mr,
@{bin}/login rPx,

4
apparmor.d/groups/utils/login
View file

@ -30,7 +30,7 @@ profile login @{exec_path} flags=(attach_disconnected) {
network netlink raw,
signal (send) set=(hup term),
signal send set=(hup term),
ptrace read,
@ -38,7 +38,7 @@ profile login @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{bin}/@{shells} rUx,
@{shells_path} rUx,
@{etc_ro}/environment r,
@{etc_ro}/security/group.conf r,

6
apparmor.d/groups/utils/su
View file

@ -15,9 +15,9 @@ profile su @{exec_path} {
capability chown, # pseudo-terminal
signal (send) set=(term,kill),
signal (receive) set=(int,quit,term),
signal (receive) set=(cont,hup) peer=sudo,
signal send set=(term kill),
signal receive set=(int quit term),
signal receive set=(cont hup) peer=sudo,
@{exec_path} mr,

3
apparmor.d/groups/utils/uname
View file

@ -14,9 +14,6 @@ profile uname @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{lib}/@{multiarch}/ld-linux-*so* r,
@{lib}/@{multiarch}/libc.so* mr,
@{att}/dev/tty@{int} rw,
deny network,