felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): zram: move kmod to its own subprofile.

Browse source
This commit is contained in:
Alexandre Pujol 2025-06-21 19:55:22 +02:00
parent 226cb23073
commit 6735b8e5f8
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 8 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

13
apparmor.d/groups/systemd/zram-generator
View file

@ -11,16 +11,13 @@ profile zram-generator @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/systemd> include <abstractions/common/systemd>
capability sys_module,
@{exec_path} mr, @{exec_path} mr,
@{bin}/kmod rix, @{bin}/kmod rCx,
@{bin}/systemd-detect-virt rPx, @{bin}/systemd-detect-virt rPx,
@{lib}/systemd/systemd-makefs rPx, @{lib}/systemd/systemd-makefs rPx,
/etc/systemd/zram-generator.conf r, /etc/systemd/zram-generator.conf r,
/etc/modprobe.d/{,**} r,
owner @{run}/systemd/generator/{,*/}var-cache-makepkg.mount rw, owner @{run}/systemd/generator/{,*/}var-cache-makepkg.mount rw,
owner @{run}/systemd/generator/dev-zram@{int}.swap rw, owner @{run}/systemd/generator/dev-zram@{int}.swap rw,
@ -29,12 +26,18 @@ profile zram-generator @{exec_path} flags=(attach_disconnected) {
@{sys}/block/zram@{int}/* rw, @{sys}/block/zram@{int}/* rw,
@{sys}/devices/virtual/block/zram@{int}/* rw, @{sys}/devices/virtual/block/zram@{int}/* rw,
@{sys}/module/compression r,
@{PROC}/crypto r, @{PROC}/crypto r,
owner /dev/pts/@{int} rw, owner /dev/pts/@{int} rw,
profile kmod {
include <abstractions/base>
include <abstractions/app/kmod>
include if exists <local/zram-generator_kmod>
}
include if exists <local/zram-generator> include if exists <local/zram-generator>
} }