felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-03-07 17:57:57 +00:00
parent 3ff8e3847d
commit 558cb68f23
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
27 changed files with 155 additions and 150 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/profiles-s-z/snapd
View file

@ -43,6 +43,11 @@ profile snapd @{exec_path} {
ptrace (read) peer=snap,
ptrace (read) peer=unconfined,
dbus (send) bus=system path=/org/freedesktop/
interface=org.freedesktop.login1.Manager
member={SetWallMessage,ScheduleShutdown}
peer=(name=org.freedesktop.login1, label=systemd-logind),
dbus send bus=system path=/org/freedesktop/timedate1
interface=org.freedesktop.DBus.Properties
member=Get
@ -151,6 +156,7 @@ profile snapd @{exec_path} {
@{sys}/fs/cgroup/system.slice/{,**/} r,
@{sys}/fs/cgroup/user.slice/ r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/{,**/} r,
@{sys}/kernel/kexec_loaded r,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
@{sys}/kernel/security/apparmor/features/ r,
@{sys}/kernel/security/apparmor/profiles r,