felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-05-15 22:56:42 +01:00
parent 0b66933b45
commit 5c382d7eb3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
33 changed files with 115 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-m-r/pkexec
View file

@ -46,8 +46,8 @@ profile pkexec @{exec_path} flags=(complain) {
/{usr/,}{s,}bin/* rPUx,
/{usr/,}bin/* rPUx,
/{usr/,}lib/gvfs/gvfsd-admin rPUx, #(#FIXME#)
/{usr/,}lib/polkit-[0-9]/polkit-agent-helper-[0-9] rPx,
/{usr/,}lib/update-notifier/package-system-locked rPx,
# file_inherit
owner /dev/tty[0-9]* rw,

3
apparmor.d/profiles-m-r/power-profiles-daemon
View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/power-profiles-daemon
profile power-profiles-daemon @{exec_path} {
profile power-profiles-daemon @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
@ -23,6 +23,7 @@ profile power-profiles-daemon @{exec_path} {
@{sys}/bus/ r,
@{sys}/class/ r,
@{sys}/class/power_supply/ r,
@{sys}/devices/**/power_supply/*/scope r,
@{sys}/devices/**/power_supply/*/uevent r,
@{sys}/devices/system/cpu/*_pstate/{no_turbo,turbo_pct} r,
@{sys}/devices/system/cpu/*_pstate/status r,