feat(profile): initial integration with attached path.
The feature is not yet enabled. See https://apparmor.pujol.io/development/internal/#re-attached-path
This commit is contained in:
parent
5bf8c6ef0f
commit
61a27bc336
85 changed files with 164 additions and 139 deletions
|
|
@ -97,12 +97,13 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
|
|||
owner @{HOME}/@{XDG_SSH_DIR}/authorized_keys{,.*} r,
|
||||
owner @{user_cache_dirs}/{,motd*} rw,
|
||||
|
||||
@{att}/@{run}/systemd/sessions/@{int}.ref rw,
|
||||
|
||||
@{run}/faillock/@{user} rwk,
|
||||
@{run}/motd.d/{,*} r,
|
||||
@{run}/motd.dynamic rw,
|
||||
@{run}/motd.dynamic.new rw,
|
||||
@{run}/systemd/notify w,
|
||||
@{run}/systemd/sessions/*.ref rw,
|
||||
owner @{run}/sshd{,.init}.pid wl,
|
||||
|
||||
@{sys}/fs/cgroup/*/user/*/@{int}/ rw,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue