felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve support for some profiles.

Browse source 
Most of the rules have come from the integration tests.
This commit is contained in:
Alexandre Pujol 2024-11-12 22:18:11 +00:00
parent e4f0f06648
commit 66455a9251
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
29 changed files with 50 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/profiles-a-f/cpuid
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/cpuid
profile cpuid @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
capability mknod,

1
apparmor.d/profiles-a-f/fprintd
View file

@ -29,7 +29,6 @@ profile fprintd @{exec_path} flags=(attach_disconnected) {
@{att}/@{run}/systemd/inhibit/@{int}.ref rw,
@{run}/systemd/journal/socket rw,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/class/hidraw/ r,