felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve dpkg deb & split.

Browse source
This commit is contained in:
Alexandre Pujol 2024-05-07 16:12:29 +01:00
parent 9a2f4b5dbe
commit 4ada6f5879
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 9 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

19
apparmor.d/groups/apt/dpkg-deb
View file

@ -21,22 +21,17 @@ profile dpkg-deb @{exec_path} {
@{bin}/tar rix, @{bin}/tar rix,
@{bin}/rm rix, @{bin}/rm rix,
/var/cache/apt/archives/*.deb r,
owner /var/lib/dpkg/tmp.ci/ w, owner /var/lib/dpkg/tmp.ci/ w,
owner /var/lib/dpkg/tmp.ci/* w, owner /var/lib/dpkg/tmp.ci/* w,
# For creating deb packages owner @{user_build_dirs}/** rwkl -> @{user_build_dirs}/**,
owner @{tmp}/dpkg-deb.* rw, owner @{user_pkg_dirs}/** r,
owner @{tmp}/dpkg-deb.*/ rw, audit owner @{tmp}/dpkg-deb.* rw,
owner @{tmp}/dpkg-deb.*/* rw, audit owner @{tmp}/dpkg-deb.*/ rw,
audit owner @{tmp}/dpkg-deb.*/* rw,
# For extracting deb packages to /tmp/
owner @{tmp}/** rw,
/var/cache/apt/archives/*.deb r,
# For package building
@{user_build_dirs}/** rwkl -> @{user_build_dirs}/**,
include if exists <local/dpkg-deb> include if exists <local/dpkg-deb>
} }

4
apparmor.d/groups/apt/dpkg-split
View file

@ -26,8 +26,8 @@ profile dpkg-split @{exec_path} {
/var/cache/apt/archives/*.deb r, /var/cache/apt/archives/*.deb r,
# For package building owner @{user_build_dirs}/** rwkl -> @{user_build_dirs}/**,
@{user_build_dirs}/** rwkl -> @{user_build_dirs}/**, owner @{user_pkg_dirs}/** r,
include if exists <local/dpkg-split> include if exists <local/dpkg-split>
} }