felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): gemeral update.

Browse source 
See: #104.
This commit is contained in:
Alexandre Pujol 2023-01-18 23:22:49 +00:00
parent a16d645dcb
commit 5b15521255
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
8 changed files with 29 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/groups/grub/grub-install
View file

@ -13,21 +13,31 @@ profile grub-install @{exec_path} flags=(complain) {
include <abstractions/consoles>
include <abstractions/disks-read>
capability dac_read_search,
capability sys_admin,
@{exec_path} mr,
/{usr/,}bin/kmod rPx,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/efibootmgr rix,
/{usr/,}bin/kmod rPx,
/{usr/,}bin/lsb_release rPx -> lsb_release,
/{usr/,}bin/udevadm rPx,
/usr/share/grub/{,**} r,
/etc/default/grub.d/{,**} r,
/etc/default/grub r,
/boot/efi/EFI/BOOT/{,**} rw,
/boot/EFI/*/grubx*.efi rw,
/boot/grub/{,**} rw,
@{sys}/firmware/efi/efivars/ r,
@{sys}/firmware/efi/efivars/Boot@{hex}-@{uuid} r,
@{sys}/firmware/efi/efivars/Boot@{hex}-@{uuid} rw,
@{sys}/firmware/efi/efivars/BootCurrent-@{uuid} r,
@{sys}/firmware/efi/efivars/BootOrder-@{uuid} r,
@{sys}/firmware/efi/efivars/Timeout-@{uuid} r,
@{sys}/firmware/efi/w_platform_size r,
@{PROC}/devices r,

1
apparmor.d/groups/grub/grub-mkconfig
View file

@ -67,6 +67,7 @@ profile grub-mkconfig @{exec_path} {
/etc/default/grub.d/{*,} r,
/usr/share/grub/{**,} r,
/usr/share/terminfo/x/xterm-256color ,
/.zfs/snapshot/*/etc/{machine-id,} r,
/.zfs/snapshot/*/{usr/,}lib/os-release r,