felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-03-10 10:20:48 +00:00
parent 862cc7aaaa
commit 52b3c1bcc5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
12 changed files with 57 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/profiles-m-r/packagekitd
View file

@ -20,9 +20,11 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
capability dac_read_search,
capability fowner,
capability kill,
capability mknod,
capability net_admin,
capability setgid,
capability setuid,
capability sys_chroot,
capability sys_nice,
network inet stream,
@ -96,6 +98,7 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/touch rix,
/{usr/,}bin/appstreamcli rPx,
/{usr/,}bin/arch-audit rPx,
/{usr/,}bin/dpkg rPx -> child-dpkg,
/{usr/,}bin/glib-compile-schemas rPx,
/{usr/,}bin/systemd-inhibit rPx,
@ -128,9 +131,12 @@ profile packagekitd @{exec_path} flags=(attach_disconnected) {
@{PROC}/@{pids}/cgroup r,
@{PROC}/@{pids}/mountinfo r,
@{PROC}/sys/kernel/random/uuid r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mounts r,
/dev/tty rw,
profile gpg {
include <abstractions/base>
include <abstractions/nameservice-strict>