felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-12-15 19:41:51 +00:00
parent 11cc9bd672
commit 600d929d85
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
11 changed files with 35 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/groups/systemd/systemd-udevd
View file

@ -38,18 +38,22 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected complain) {
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/{,e}grep rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/chgrp rix,
/{usr/,}bin/chmod rix,
/{usr/,}bin/cut rix,
/{usr/,}bin/ln rix,
/{usr/,}bin/logger rix,
/{usr/,}bin/mknod rPx,
/{usr/,}bin/nohup rix,
/{usr/,}bin/perl rix,
/{usr/,}bin/readlink rix,
/{usr/,}bin/setfacl rix,
/{usr/,}bin/unshare rix,
/{usr/,}bin/snap rPx,
/{usr/,}bin/unshare rix,
/{usr/,}{s,}bin/* rPUx,
/{usr/,}{s,}bin/* rpux,
audit /{usr/,}{s,}bin/lvm rux,
/{usr/,}lib/pm-utils/power.d/* rPUx,
/{usr/,}lib/snapd/snap-device-helper rPx,
@ -82,7 +86,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected complain) {
/etc/systemd/network/[0-9][0-9]-*.link r,
@{run}/udev/ rw,
@{run}/udev/** rw,
@{run}/udev/** rwk,
@{run}/systemd/network/ r,
@{run}/systemd/notify rw,
@ -90,12 +94,13 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected complain) {
@{sys}/** rw,
owner @{PROC}/@{pid}/loginuid r,
owner @{PROC}/@{pid}/oom_score_adj rw,
owner @{PROC}/@{pid}/fd/ r,
@{PROC}/@{pids}/cgroup r,
@{PROC}/devices r,
@{PROC}/driver/nvidia/gpus/ r,
@{PROC}/driver/nvidia/gpus/*/information r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/loginuid r,
owner @{PROC}/@{pid}/oom_score_adj rw,
/dev/ rw,
/dev/** rwk,