feat(profile): initial integration with attached path.
The feature is not yet enabled. See https://apparmor.pujol.io/development/internal/#re-attached-path
This commit is contained in:
parent
5bf8c6ef0f
commit
61a27bc336
85 changed files with 164 additions and 139 deletions
|
|
@ -20,7 +20,7 @@ profile systemd-inhibit @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
@{bin}/cat rix,
|
||||
|
||||
@{run}/systemd/inhibit/@{int}.ref rw,
|
||||
@{att}/@{run}/systemd/inhibit/@{int}.ref rw,
|
||||
|
||||
include if exists <local/systemd-inhibit>
|
||||
}
|
||||
|
|
|
|||
|
|
@ -50,9 +50,9 @@ profile systemd-networkd @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
/etc/networkd-dispatcher/carrier.d/{,*} r,
|
||||
|
||||
/ r,
|
||||
@{att}/ r,
|
||||
|
||||
owner /var/lib/systemd/network/ r,
|
||||
owner @{att}/var/lib/systemd/network/ r,
|
||||
|
||||
@{run}/systemd/network/ r,
|
||||
@{run}/systemd/network/*.network r,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue