felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add lsb-release

Browse source 
Use it instead of lsb_release.
This commit is contained in:
Alexandre Pujol 2025-06-21 20:35:38 +02:00
parent 0572688c59
commit 4d201ea417
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
36 changed files with 77 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/apt/apt-listbugs
View file

@ -53,7 +53,7 @@ profile apt-listbugs @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/freedesktop.org>
capability dac_read_search,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/hostname rix,
owner @{PROC}/@{pid}/mounts r,
@{HOME}/.Xauthority r,

2
apparmor.d/groups/apt/command-not-found
View file

@ -22,7 +22,7 @@ profile command-not-found @{exec_path} {
@{exec_path} r,
@{python_path} r,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/snap rPx,
@{lib}/ r,

2
apparmor.d/groups/apt/debconf-frontend
View file

@ -21,7 +21,7 @@ profile debconf-frontend @{exec_path} flags=(complain) {
@{exec_path} r,
@{bin}/hostname ix,
@{bin}/lsb_release Px -> lsb_release,
@{bin}/lsb_release Px,
@{bin}/stty ix,
@{sbin}/update-secureboot-policy Px,

2
apparmor.d/groups/apt/reportbug
View file

@ -47,7 +47,7 @@ profile reportbug @{exec_path} {
@{bin}/dlocate rPx,
@{bin}/dpkg rPx -> child-dpkg,
@{bin}/dpkg-query rpx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{pager_path} rPx -> child-pager,
@{bin}/systemctl rCx -> systemctl,
@{lib}/firefox/firefox rPUx, # App allowed to open

2
apparmor.d/groups/apt/synaptic
View file

@ -47,7 +47,7 @@ profile synaptic @{exec_path} {
@{bin}/dpkg rPx,
@{sbin}/dpkg-preconfigure rPx,
@{bin}/localepurge rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/pkexec rCx -> pkexec,
@{bin}/ps rPx,
@{bin}/software-properties-gtk rPx,

2
apparmor.d/groups/apt/unattended-upgrade
View file

@ -58,7 +58,7 @@ profile unattended-upgrade @{exec_path} flags=(attach_disconnected) {
@{bin}/dpkg-divert Px,
@{bin}/etckeeper Px,
@{bin}/ischroot Px,
@{bin}/lsb_release Px -> lsb_release,
@{bin}/lsb_release Px,
@{sbin}/dpkg-preconfigure Px,
@{sbin}/on_ac_power Px,
@{sbin}/sendmail Px,

2
apparmor.d/groups/grub/grub-install
View file

@ -21,7 +21,7 @@ profile grub-install @{exec_path} flags=(complain) {
@{sh_path} rix,
@{sbin}/efibootmgr rix,
@{bin}/kmod rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/udevadm rPx,
/usr/share/grub/{,**} r,

2
apparmor.d/groups/grub/grub-mkconfig
View file

@ -39,7 +39,7 @@ profile grub-mkconfig @{exec_path} flags=(attach_disconnected) {
@{bin}/head rix,
@{bin}/id rPx,
@{bin}/ls rix,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/mktemp rix,
@{bin}/mount rPx,
@{bin}/mountpoint rix,

2
apparmor.d/groups/grub/grub-probe
View file

@ -19,7 +19,7 @@ profile grub-probe @{exec_path} {
@{exec_path} mr,
/{usr/,}{local/,}{s,}bin/zpool rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{sbin}/lvm rPx,
@{bin}/udevadm rPx,

2
apparmor.d/groups/kde/dolphin
View file

@ -33,7 +33,7 @@ profile dolphin @{exec_path} {
@{lib}/libheif/*.so* mr,
@{bin}/ldd rix,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{lib}/{,@{multiarch}/}utempter/utempter rPx,
@{thunderbird_path} rPx,

2
apparmor.d/groups/kde/drkonqi
View file

@ -24,7 +24,7 @@ profile drkonqi @{exec_path} {
@{exec_path} mr,
@{bin}/plasmashell r,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
/usr/share/drkonqi/{,**} r,

2
apparmor.d/groups/ubuntu/apport-gtk
View file

@ -46,7 +46,7 @@ profile apport-gtk @{exec_path} {
@{sbin}/killall5 rix,
@{bin}/kmod rPx,
@{bin}/ldd rix,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/md5sum rix,
@{bin}/pkexec rCx -> pkexec,
@{bin}/systemctl rCx -> systemctl,

2
apparmor.d/groups/ubuntu/check-new-release-gtk
View file

@ -30,7 +30,7 @@ profile check-new-release-gtk @{exec_path} {
@{bin}/dpkg rPx,
@{bin}/ischroot rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{lib}/@{python_name}/dist-packages/UpdateManager/**/__pycache__/*.cpython-@{int}.pyc.@{int} w,
@{lib}/@{python_name}/dist-packages/gi/**/__pycache__/*.cpython-@{int}.pyc.@{int} w,

2
apparmor.d/groups/ubuntu/do-release-upgrade
View file

@ -27,7 +27,7 @@ profile do-release-upgrade @{exec_path} {
@{bin}/dpkg rPx -> child-dpkg,
@{bin}/ischroot rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
/usr/share/distro-info/*.csv r,
/usr/share/ubuntu-release-upgrader/{,**} r,

2
apparmor.d/groups/ubuntu/hwe-support-status
View file

@ -15,7 +15,7 @@ profile hwe-support-status @{exec_path} {
@{exec_path} mr,
@{bin}/dpkg rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
/usr/share/distro-info/{,**} r,

2
apparmor.d/groups/ubuntu/software-properties-dbus
View file

@ -30,7 +30,7 @@ profile software-properties-dbus @{exec_path} {
@{python_path} rix,
@{bin}/env rix,
@{bin}/apt-key rPx, # Changing trusted keys
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
/etc/apt/apt.conf.d/10periodic w,
/etc/apt/sources.list{,.save} rw,

2
apparmor.d/groups/ubuntu/software-properties-gtk
View file

@ -33,7 +33,7 @@ profile software-properties-gtk @{exec_path} {
@{bin}/apt-key rPx,
@{bin}/dpkg rPx -> child-dpkg,
@{bin}/ischroot rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/ubuntu-advantage rPx,
/usr/share/distro-info/*.csv r,

2
apparmor.d/groups/ubuntu/update-manager
View file

@ -45,7 +45,7 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
@{bin}/dpkg rPx -> child-dpkg,
@{bin}/hwe-support-status rPx,
@{bin}/ischroot rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/snap rPUx,
@{bin}/software-properties-gtk rPx,
@{bin}/uname rix,

2
apparmor.d/groups/ubuntu/update-motd-updates-available
View file

@ -27,7 +27,7 @@ profile update-motd-updates-available @{exec_path} {
@{bin}/dpkg rPx -> child-dpkg,
@{bin}/find rix,
@{bin}/ischroot rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/mktemp rix,
@{bin}/mv rix,
@{bin}/rm rix,

2
apparmor.d/groups/ubuntu/update-notifier
View file

@ -35,7 +35,7 @@ profile update-notifier @{exec_path} {
@{bin}/dpkg rPx -> child-dpkg,
@{bin}/ischroot rPx,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/lsb_release rPx,
@{bin}/pkexec rCx -> pkexec,
@{bin}/snap rPUx,
@{bin}/software-properties-gtk rPx,