felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables

Browse source 
* 'tunables' of https://github.com/nobody43/apparmor.d:
  dbus temp tails
  Update apparmor.d
  Update gdm-runtime-config
  more unrelated changes
  adjust date-time
  random tails
  rename to int, convert more profiles
  fixes
  tunables
This commit is contained in:
Alexandre Pujol 2023-08-17 20:01:53 +01:00
parent 7b018a60bd
commit 557d905543
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
198 changed files with 560 additions and 507 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/children/child-dpkg
View file

@ -45,7 +45,7 @@ profile child-dpkg {
/var/log/dpkg.log ra,
# file_inherit
/tmp/#[0-9]*[0-9] rw,
/tmp/#@{int} rw,
include if exists <local/child-dpkg>
}

2
apparmor.d/groups/children/child-dpkg-divert
View file

@ -26,7 +26,7 @@ profile child-dpkg-divert {
/var/lib/dpkg/diversions r,
# file_inherit
/tmp/#[0-9]*[0-9] rw,
/tmp/#@{int} rw,
include if exists <local/child-dpkg-divert>
}

8
apparmor.d/groups/children/child-systemctl
View file

@ -39,10 +39,10 @@ profile child-systemctl flags=(attach_disconnected) {
/etc/systemd/user/{,**} rwl,
/{run,var}/log/journal/ r,
/{run,var}/log/journal/@{hex}/ r,
/{run,var}/log/journal/@{hex}/user-@{hex}.journal* r,
/{run,var}/log/journal/@{hex}/system.journal* r,
/{run,var}/log/journal/@{hex}/system@@{hex}.journal* r,
/{run,var}/log/journal/@{md5}/ r,
/{run,var}/log/journal/@{md5}/user-@{hex}.journal* r,
/{run,var}/log/journal/@{md5}/system.journal* r,
/{run,var}/log/journal/@{md5}/system@@{hex}.journal* r,
@{run}/systemd/private rw,