felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: update profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2022-03-30 22:20:56 +01:00
parent 9d40327b00
commit 6d1fa42f25
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
19 changed files with 44 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/systemd/systemd-logind
View file

@ -46,12 +46,14 @@ profile systemd-logind @{exec_path} flags=(complain) {
@{run}/udev/data/c116:[0-9]* r, # for ALSA
@{run}/udev/data/c226:[0-9]* r, # for /dev/dri/card*
@{run}/udev/data/c23[0-9]:[0-9]* r,
@{run}/udev/data/c29:[0-9]* r,
@{run}/udev/data/c50[0-9]:[0-9]* r,
@{run}/udev/data/c51[0-9]:[0-9]* r,
@{run}/udev/data/+input* r, # for mouse, keyboard, touchpad
@{run}/udev/data/+drm:card[0-9]-* r, # for screen outputs
@{run}/udev/data/+backlight:intel_backlight r,
@{run}/udev/data/+pci* r,
@{run}/systemd/seats/ rw,
@{run}/systemd/seats/.#seat* rw,

1
apparmor.d/groups/systemd/systemd-tty-ask-password-agent
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = /{usr/,}bin/systemd-tty-ask-password-agent
profile systemd-tty-ask-password-agent @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
@{exec_path} mr,

5
apparmor.d/groups/systemd/zram-generator
View file

@ -13,8 +13,9 @@ profile zram-generator @{exec_path} {
@{exec_path} mr,
/{usr/,}lib/systemd/systemd-makefs rPx,
/{usr/,}bin/systemd-detect-virt rPx,
/{usr/,}bin/kmod rix,
/{usr/,}bin/systemd-detect-virt rPx,
/{usr/,}lib/systemd/systemd-makefs rPx,
/etc/systemd/zram-generator.conf r,