felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(fsp): small improvments.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-23 14:16:31 +01:00
parent 46b0b19d5b
commit 5e225ed0ec
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 6 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/groups/_full/systemd
View file

@ -181,10 +181,10 @@ profile systemd flags=(attach_disconnected,mediate_deleted) {
# Systemd profiles that need be stacked # Systemd profiles that need be stacked
#aa:stack systemd-networkd systemd-oomd systemd-resolved systemd-timesyncd #aa:stack systemd-networkd systemd-oomd systemd-resolved systemd-timesyncd
@{lib}/systemd/systemd-networkd Px -> systemd//&systemd-networkd, @{lib}/systemd/systemd-networkd px -> systemd//&systemd-networkd,
@{lib}/systemd/systemd-oomd Px -> systemd//&systemd-oomd, @{lib}/systemd/systemd-oomd px -> systemd//&systemd-oomd,
@{lib}/systemd/systemd-resolved Px -> systemd//&systemd-resolved, @{lib}/systemd/systemd-resolved px -> systemd//&systemd-resolved,
@{lib}/systemd/systemd-timesyncd Px -> systemd//&systemd-timesyncd, @{lib}/systemd/systemd-timesyncd px -> systemd//&systemd-timesyncd,
@{lib}/ r, @{lib}/ r,
/ r, / r,
@ -208,6 +208,7 @@ profile systemd flags=(attach_disconnected,mediate_deleted) {
/etc/networkd-dispatcher/{,**} r, /etc/networkd-dispatcher/{,**} r,
/etc/systemd/{,**} r, /etc/systemd/{,**} r,
/etc/udev/hwdb.d/{,**} r, /etc/udev/hwdb.d/{,**} r,
/etc/systemd/system/multi-user.target.wants/{,*} w,
/var/log/dmesg rw, /var/log/dmesg rw,
/var/lib/systemd/{,**} rw, /var/lib/systemd/{,**} rw,
@ -235,6 +236,7 @@ profile systemd flags=(attach_disconnected,mediate_deleted) {
@{run}/udev/data/+module:configfs r, @{run}/udev/data/+module:configfs r,
@{run}/udev/data/+module:fuse r, @{run}/udev/data/+module:fuse r,
@{run}/udev/data/c4:@{int} r, # For TTY devices @{run}/udev/data/c4:@{int} r, # For TTY devices
@{run}/udev/data/c5:@{int} r, # for /dev/tty, /dev/console, /dev/ptmx
@{run}/udev/data/c10:@{int} r, # For non-serial mice, misc features @{run}/udev/data/c10:@{int} r, # For non-serial mice, misc features
@{run}/udev/data/c116:@{int} r, # For ALSA @{run}/udev/data/c116:@{int} r, # For ALSA
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511 @{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511