felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-28 17:17:20 +00:00
parent 1c999ca921
commit 555b5e3c3f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
43 changed files with 142 additions and 124 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/network/networkd-dispatcher
View file

@ -17,15 +17,21 @@ profile networkd-dispatcher @{exec_path} {
dbus receive bus=system path=/org/freedesktop/network1{,/link/*}
interface=org.freedesktop.DBus.Properties
member=PropertiesChanged
peer=(name=:*),
peer=(name=:*, label=systemd-networkd),
@{exec_path} mr,
@{bin}/ r,
@{bin}/networkctl rPx,
@{bin}/ls rix,
@{bin}/sed rix,
@{lib}/networkd-dispatcher/routable.d/postfix rix,
/etc/networkd-dispatcher/{,**} r,
/var/spool/postfix/pid/master.pid r,
@{run}/systemd/notify rw,
owner @{PROC}/@{pid}/fd/ r,

4
apparmor.d/groups/network/nm-dispatcher
View file

@ -18,7 +18,7 @@ profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
capability sys_nice,
capability sys_ptrace,
ptrace (read) peer=unconfined,
ptrace (read) peer=@{systemd},
# dbus: own bus=system name=org.freedesktop.nm_dispatcher
@ -73,7 +73,7 @@ profile nm-dispatcher @{exec_path} flags=(attach_disconnected) {
/etc/network/if-*.d/* rPUx,
/etc/wpa_supplicant/ifupdown.sh rPUx,
include if exists <local/anacron_run_parts>
include if exists <local/nm-dispatcher_run-parts>
}
include if exists <local/nm-dispatcher>