update apparmor profiles

This commit is contained in:
Mikhail Morfikov 2020-12-09 10:30:52 +01:00
parent f73da4a046
commit 503cf496bf
No known key found for this signature in database
GPG key ID: 32D9CB634796CCA1
218 changed files with 1445 additions and 1502 deletions

View file

@ -75,10 +75,10 @@ profile openvpn @{exec_path} {
/etc/openvpn/update-resolv-conf.sh r,
/{usr/,}bin/bash rix,
/{usr/,}bin/cut rix,
/{usr/,}bin/which rix,
/{usr/,}bin/ip rix,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/cut rix,
/{usr/,}bin/which rix,
/{usr/,}bin/ip rix,
/{usr/,}sbin/xtables-nft-multi rix,
/etc/iproute2/rt_tables r,
@ -93,16 +93,16 @@ profile openvpn @{exec_path} {
capability net_admin,
/etc/openvpn/ r,
/etc/openvpn/force-user-traffic-via-vpn.sh r,
/{usr/,}bin/dash rix,
#/{usr/,}bin/bash rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/cut rix,
/{usr/,}bin/{,e}grep rix,
/{usr/,}bin/ip rix,
/{usr/,}sbin/nft rix,
/{usr/,}bin/env rix,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/cut rix,
/{usr/,}bin/{,e}grep rix,
/{usr/,}bin/ip rix,
/{usr/,}sbin/nft rix,
/{usr/,}bin/env rix,
/etc/iproute2/rt_realms r,
/etc/iproute2/group r,