Update profile from #25.

This commit is contained in:
Alexandre Pujol 2022-02-08 19:49:31 +00:00
parent 9ecc1aa240
commit 6294159d7a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
28 changed files with 83 additions and 20 deletions

View file

@ -36,6 +36,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/ldconfig rix,
/{usr/,}bin/ldd rix,
/{usr/,}bin/ln rix,
/{usr/,}bin/loadkeys rix,
/{usr/,}bin/mktemp rix,
/{usr/,}bin/readlink rix,
/{usr/,}bin/rm rix,
@ -59,10 +60,13 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
/etc/fstab r,
/etc/lvm/lvm.conf r,
/etc/vconsole.conf r,
/etc/locale.conf r,
/etc/mkinitcpio.conf r,
/etc/mkinitcpio.d/{,**} r,
/etc/modprobe.d/{,*} r,
/usr/share/kbd/keymaps/{,**} r,
/usr/share/terminfo/x/xterm-256color r,
# Can copy any program to the initframs

View file

@ -52,6 +52,7 @@ profile pacman @{exec_path} {
/{usr/,}bin/dot rix,
/{usr/,}bin/env rix,
/{usr/,}bin/filecap rix,
/{usr/,}bin/find rix,
/{usr/,}bin/getent rix,
/{usr/,}bin/gettext rix,
/{usr/,}bin/ghc-pkg-* rix,
@ -64,6 +65,7 @@ profile pacman @{exec_path} {
/{usr/,}bin/arch-audit rPx,
/{usr/,}bin/archlinux-java rPx,
/{usr/,}bin/bootctl rPx,
/{usr/,}bin/dconf rPx,
/{usr/,}bin/fc-cache rPx,
/{usr/,}bin/gdk-pixbuf-query-loaders rPx,
/{usr/,}bin/glib-compile-schemas rPx,

View file

@ -21,6 +21,8 @@ profile pacman-hook-fontconfig @{exec_path} {
/etc/fonts/conf.d/* rwl,
/usr/share/fontconfig/conf.default/* r,
/dev/tty rw,
# Inherit Silencer
deny network inet6 stream,
deny network inet stream,