felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-08 12:37:40 +01:00
parent 537e34739d
commit 6715564053
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 68 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/groups/pacman/aurpublish
View file

@ -9,6 +9,15 @@ include <tunables/global>
@{exec_path} = /usr/share/aurpublish/*.hook
profile aurpublish @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
include <abstractions/openssl>
network inet dgram,
network inet6 dgram,
network inet stream,
network inet6 stream,
network netlink raw,
signal (receive) peer=git,
@ -44,7 +53,7 @@ profile aurpublish @{exec_path} {
owner @{user_projects_dirs}/**/.SRCINFO rw,
owner @{user_projects_dirs}/**/PKGBUILD r,
owner @{user_cache_dirs}/makepkg/src/* r,
owner @{user_cache_dirs}/makepkg/src/* rw,
owner @{user_config_dirs}/pacman/makepkg.conf r,
owner /tmp/tmp.* rw,

6
apparmor.d/groups/pacman/pacman-hook-code
View file

@ -15,10 +15,14 @@ profile pacman-hook-code @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/{,ba}sh rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/env rix,
/{usr/,}bin/grep rix,
/{usr/,}bin/sed rix,
/{usr/,}lib/code/product.json rw,
/{usr/,}lib/code/sed?????? rw,
/dev/tty rw,
include if exists <local/pacman-hook-code>
}