felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use @{int} on systemd/inhibit.

Browse source
This commit is contained in:
Alexandre Pujol 2024-09-05 14:23:16 +01:00
parent 4e17001ce2
commit 6b191d9ada
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
38 changed files with 38 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/virt/libvirtd
View file

@ -157,7 +157,7 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
@{run}/libvirt/** rwk,
@{run}/libvirtd.pid wk,
@{run}/lock/LCK.._pts_@{int} rw,
@{run}/systemd/inhibit/[0-9]*.ref rw,
@{run}/systemd/inhibit/@{int}.ref rw,
@{run}/systemd/notify w,
@{run}/utmp rk,

2
apparmor.d/groups/virt/virtinterfaced
View file

@ -20,7 +20,7 @@ profile virtinterfaced @{exec_path} flags=(attach_disconnected) {
@{lib}/gconv/gconv-modules rm,
@{lib}/gconv/gconv-modules.d/{,*} r,
@{run}/systemd/inhibit/*.ref rw,
@{run}/systemd/inhibit/@{int}.ref rw,
owner @{run}/user/@{uid}/libvirt/common/system.token rwk,
owner @{run}/user/@{uid}/libvirt/interface/ rw,
owner @{run}/user/@{uid}/libvirt/interface/run/{,*} rwk,

2
apparmor.d/groups/virt/virtlogd
View file

@ -30,7 +30,7 @@ profile virtlogd @{exec_path} flags=(attach_disconnected) {
@{run}/libvirt/common/system.token rwk,
@{run}/libvirt/virtlogd-sock rw,
@{run}/systemd/inhibit/[0-9]*.ref rw,
@{run}/systemd/inhibit/@{int}.ref rw,
@{run}/virtlogd.pid rwk,
@{sys}/devices/system/node/ r,

2
apparmor.d/groups/virt/virtnetworkd
View file

@ -25,7 +25,7 @@ profile virtnetworkd @{exec_path} flags=(attach_disconnected) {
owner /var/lib/libvirt/dnsmasq/*.macs* rw,
@{run}/libvirt/network/default.pid r,
@{run}/systemd/inhibit/*.ref rw,
@{run}/systemd/inhibit/@{int}.ref rw,
@{run}/utmp rk,
owner @{run}/libvirt/common/system.token rwk,
owner @{run}/libvirt/network/{,**} rwk,

2
apparmor.d/groups/virt/virtnodedevd
View file

@ -33,7 +33,7 @@ profile virtnodedevd @{exec_path} flags=(attach_disconnected) {
/etc/libvirt/virtnodedevd.conf r,
/etc/mdevctl.d/{,**} r,
@{run}/systemd/inhibit/*.ref rw,
@{run}/systemd/inhibit/@{int}.ref rw,
owner @{run}/libvirt/common/system.token rwk,
owner @{run}/libvirt/nodedev/ rw,
owner @{run}/libvirt/nodedev/driver.pid wk,

2
apparmor.d/groups/virt/virtsecretd
View file

@ -20,7 +20,7 @@ profile virtsecretd @{exec_path} flags=(attach_disconnected) {
owner @{user_config_dirs}/libvirt/secrets/ rw,
owner @{user_config_dirs}/libvirt/secrets/run/{,*} rwk,
@{run}/systemd/inhibit/*.ref rw,
@{run}/systemd/inhibit/@{int}.ref rw,
owner @{run}/user/@{uid}/libvirt/common/system.token rwk,
owner @{run}/user/@{uid}/libvirt/secrets/ rw,
owner @{run}/user/@{uid}/libvirt/secrets/run/{,*} rwk,

2
apparmor.d/groups/virt/virtstoraged
View file

@ -55,7 +55,7 @@ profile virtstoraged @{exec_path} flags=(attach_disconnected) {
owner @{run}/libvirt/storage/{,**} rwk,
owner @{run}/virtstoraged.pid rwk,
@{run}/systemd/inhibit/[0-9]*.ref rw,
@{run}/systemd/inhibit/@{int}.ref rw,
@{run}/utmp rwk,
@{sys}/devices/system/node/ r,