felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update unbound

Browse source 
The marked entries were indeed superfluous. No errors on compalin and enforce mode
This commit is contained in:
barmogund 2024-11-10 11:13:04 +01:00 • committed by GitHub
parent 20bdaa0f4d
commit 55cb4b70fe
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

13
apparmor.d/profiles-s-z/unbound
View file

@ -15,7 +15,6 @@ profile unbound @{exec_path} flags=(attach_disconnected) {
include <abstractions/nameservice-strict>
include <abstractions/p11-kit>
include <abstractions/ssl_certs>
include <abstractions/common/systemd>
capability net_bind_service,
capability net_raw,
@ -23,7 +22,6 @@ profile unbound @{exec_path} flags=(attach_disconnected) {
capability sys_chroot,
capability setgid,
capability setuid,
capability setpcap,
network unix stream,
network unix dgram,
@ -34,22 +32,13 @@ profile unbound @{exec_path} flags=(attach_disconnected) {
network netlink raw,
signal (receive) set=(term, cont) peer=runsv,
#aa:dbus own bus=system name=org.freedesktop.resolve1
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
peer=(name=org.freedesktop.DBus, label=dbus-system),
@{exec_path} mr,
/etc/unbound/{,**} rw,
/etc/systemd/resolved.conf r,
/etc/systemd/resolved.conf.d/{,*} r,
/etc/unbound/{,**} r,
@{run}/systemd/netif/links/* r,
@{run}/systemd/notify rw,
@{run}/systemd/resolve/{,**} rw,
@{PROC}/@{pid}/cgroup r,
@{PROC}/ r,