Update unbound
The marked entries were indeed superfluous. No errors on compalin and enforce mode
This commit is contained in:
parent
20bdaa0f4d
commit
55cb4b70fe
1 changed files with 1 additions and 12 deletions
|
|
@ -15,7 +15,6 @@ profile unbound @{exec_path} flags=(attach_disconnected) {
|
||||||
include <abstractions/nameservice-strict>
|
include <abstractions/nameservice-strict>
|
||||||
include <abstractions/p11-kit>
|
include <abstractions/p11-kit>
|
||||||
include <abstractions/ssl_certs>
|
include <abstractions/ssl_certs>
|
||||||
include <abstractions/common/systemd>
|
|
||||||
|
|
||||||
capability net_bind_service,
|
capability net_bind_service,
|
||||||
capability net_raw,
|
capability net_raw,
|
||||||
|
|
@ -23,7 +22,6 @@ profile unbound @{exec_path} flags=(attach_disconnected) {
|
||||||
capability sys_chroot,
|
capability sys_chroot,
|
||||||
capability setgid,
|
capability setgid,
|
||||||
capability setuid,
|
capability setuid,
|
||||||
capability setpcap,
|
|
||||||
|
|
||||||
network unix stream,
|
network unix stream,
|
||||||
network unix dgram,
|
network unix dgram,
|
||||||
|
|
@ -34,22 +32,13 @@ profile unbound @{exec_path} flags=(attach_disconnected) {
|
||||||
network netlink raw,
|
network netlink raw,
|
||||||
|
|
||||||
signal (receive) set=(term, cont) peer=runsv,
|
signal (receive) set=(term, cont) peer=runsv,
|
||||||
#aa:dbus own bus=system name=org.freedesktop.resolve1
|
|
||||||
|
|
||||||
dbus send bus=system path=/org/freedesktop/DBus
|
|
||||||
interface=org.freedesktop.DBus
|
|
||||||
member={GetConnectionUnixUser,GetConnectionUnixProcessID}
|
|
||||||
peer=(name=org.freedesktop.DBus, label=dbus-system),
|
|
||||||
|
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
/etc/unbound/{,**} rw,
|
/etc/unbound/{,**} r,
|
||||||
/etc/systemd/resolved.conf r,
|
|
||||||
/etc/systemd/resolved.conf.d/{,*} r,
|
|
||||||
|
|
||||||
@{run}/systemd/netif/links/* r,
|
@{run}/systemd/netif/links/* r,
|
||||||
@{run}/systemd/notify rw,
|
@{run}/systemd/notify rw,
|
||||||
@{run}/systemd/resolve/{,**} rw,
|
|
||||||
|
|
||||||
@{PROC}/@{pid}/cgroup r,
|
@{PROC}/@{pid}/cgroup r,
|
||||||
@{PROC}/ r,
|
@{PROC}/ r,
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue