felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

systemd-journald: adding mediate_deleted (#657)

Browse source 
* Update systemd-journald

profile systemd-journald flags=(mediate_deleted) {
link /var/log/journal/@{hex32}/#42742 ,                                                   # Failed name lookup - deleted entry
link /var/log/journal/@{hex32}/#42744 ,                                                   # Failed name lookup - deleted entry
link /var/log/journal/@{hex32}/.#system@@{hex32}-@{hex16}-@{hex16}.journal@{hex16} -> /var/log/journal/@{hex32}/#42744,
link /var/log/journal/@{hex32}/.#user-@{uid}@@{hex32}-@{hex16}-@{hex16}.journal@{hex16} -> /var/log/journal/@{hex32}/#42742,
}

* Update main.flags

Adding `systemd-journald attach_disconnected,mediate_deleted`
This commit is contained in:
curiosityseeker 2025-01-26 21:07:44 +01:00 • committed by GitHub
parent d802bf82f2
commit 4a978ef9b6
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/systemd/systemd-journald
View file

@ -8,7 +8,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-journald @{exec_path} = @{lib}/systemd/systemd-journald
profile systemd-journald @{exec_path} flags=(attach_disconnected) { profile systemd-journald @{exec_path} flags=(attach_disconnected,mediate_deleted) {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/common/systemd> include <abstractions/common/systemd>

1
dists/flags/main.flags
View file

@ -333,6 +333,7 @@ systemd-generator-veritysetup attach_disconnected,complain
systemd-homed attach_disconnected,complain systemd-homed attach_disconnected,complain
systemd-homework complain systemd-homework complain
systemd-inhibit attach_disconnected,complain systemd-inhibit attach_disconnected,complain
systemd-journald attach_disconnected,mediate_deleted
systemd-mount complain systemd-mount complain
systemd-network-generator complain systemd-network-generator complain
systemd-portabled complain systemd-portabled complain