felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2021-09-04 13:59:45 +01:00
parent c801bceab5
commit 6583a7bfb2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
26 changed files with 88 additions and 40 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/groups/network/openvpn
View file

@ -65,7 +65,7 @@ profile openvpn @{exec_path} {
@{run}/NetworkManager/nm-openvpn-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]* rw,
/{usr/,}bin/ip rix,
/{usr/,}bin/systemd-ask-password rCx -> systemd-ask-password,
/{usr/,}bin/systemd-ask-password rPx,
/{usr/,}lib/nm-openvpn-service-openvpn-helper rPx,
/etc/openvpn/force-user-traffic-via-vpn.sh rCx -> force-user-traffic-via-vpn,
/etc/openvpn/update-resolv-conf{,.sh} rCx -> update-resolv,
@ -74,18 +74,6 @@ profile openvpn @{exec_path} {
owner @{PROC}/@{pid}/net/route r,
profile systemd-ask-password {
include <abstractions/base>
include <abstractions/consoles>
/{usr/,}bin/systemd-ask-password mr,
@{PROC}/filesystems r,
owner @{PROC}/@{pid}/stat r,
}
profile update-resolv {
include <abstractions/base>
include <abstractions/consoles>