feat(profiles): general update.

2023-03-10 10:20:48 +00:00 · 2023-03-10 10:20:48 +00:00 · 52b3c1bcc5
commit 52b3c1bcc5
parent 862cc7aaaa
12 changed files with 57 additions and 27 deletions
--- a/apparmor.d/groups/pacman/pacman-hook-systemd
+++ b/apparmor.d/groups/pacman/pacman-hook-systemd
@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = /usr/share/libalpm/scripts/systemd-hook
 profile pacman-hook-systemd @{exec_path} {
  include <abstractions/base>
+  include <abstractions/nameservice-strict>

  capability dac_read_search,

--- a/apparmor.d/groups/virt/cockpit-pcp
+++ b/apparmor.d/groups/virt/cockpit-pcp
@ -12,6 +12,8 @@ profile cockpit-pcp @{exec_path} {
  include <abstractions/nameservice-strict>
  include <abstractions/disks-read>

+  network inet dgram,
+  network inet stream,
  network inet6 dgram,
  network inet6 stream,