felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-19 23:52:43 +00:00
parent ef1776b8d5
commit 6a81d335f8
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 19 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/network/netplan.script
View file

@ -22,9 +22,9 @@ profile netplan.script @{exec_path} flags=(attach_disconnected) {
/etc/netplan/{,*} r,
@{run}/NetworkManager/conf.d/10-globally-managed-devices.conf{,.@{rand6}} w,
@{run}/NetworkManager/conf.d/10-globally-managed-devices.conf{,.@{rand6}} rw,
@{run}/NetworkManager/system-connections/ r,
@{run}/NetworkManager/system-connections/netplan-*.nmconnection{,.@{rand6}} w,
@{run}/NetworkManager/system-connections/netplan-*.nmconnection{,.@{rand6}} rw,
@{run}/systemd/system/ r,
@{run}/systemd/system/netplan-* rw,
@{run}/systemd/system/systemd-networkd.service.wants/ r,
@ -51,8 +51,12 @@ profile netplan.script @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/systemd-common>
capability net_admin,
@{bin}/systemctl mr,
owner @{run}/systemd/private rw,
include if exists <local/netplan.script_systemctl>
}