felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: update profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2022-03-30 22:20:56 +01:00
parent 9d40327b00
commit 6d1fa42f25
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
19 changed files with 44 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

19
apparmor.d/profiles-s-z/sensors
View file

@ -1,6 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2015-2020 Mikhail Morfikov
# 2021 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2015-2022 Mikhail Morfikov
# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -18,18 +18,19 @@ profile sensors @{exec_path} {
/etc/sensors.d/{,*} r,
/etc/sensors3.conf r,
@{sys}/devices/pci[0-9]*/**/name r,
@{sys}/class/i2c-adapter/ r,
@{sys}/class/hwmon/ r,
@{sys}/class/i2c-adapter/ r,
@{sys}/devices/**/hwmon*/{,**/} r,
@{sys}/devices/**/hwmon*/{in[0-9]_label,in[0-9]_min,in[0-9]_max} r,
@{sys}/devices/**/hwmon*/{name,temp*,*_input} r,
@{sys}/devices/**/hwmon*/**/{name,temp*,*_input} r,
@{sys}/devices/**/hwmon/hwmon[0-9]*/power[0-9]*_crit r,
@{sys}/devices/i2c-[0-9]*/name r,
@{sys}/devices/pci[0-9]*/**/name r,
@{sys}/devices/virtual/hwmon/hwmon[0-9]* r,
@{sys}/devices/virtual/hwmon/hwmon[0-9]*/ r,
@{sys}/devices/virtual/hwmon/hwmon[0-9]*/{name,temp*} r,
@{sys}/devices/virtual/hwmon/hwmon[0-9]*/fan[0-9]_label r,
@{sys}/devices/**/hwmon*/{,**/} r,
@{sys}/devices/**/hwmon*/{name,temp*,*_input} r,
@{sys}/devices/**/hwmon*/{in[0-9]_label,in[0-9]_min,in[0-9]_max} r,
@{sys}/devices/**/hwmon*/**/{name,temp*,*_input} r,
# file_inherit
deny @{PROC}/@{pid}/net/dev r,

5
apparmor.d/profiles-s-z/sensors-detect
View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2020-2021 Mikhail Morfikov
# Copyright (C) 2020-2022 Mikhail Morfikov
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -37,7 +38,7 @@ profile sensors-detect @{exec_path} {
/dev/i2c-[0-9]* r,
owner @{PROC}/@{pid}/mounts r,
/proc/modules r,
@{PROC}/modules r,
profile udevadm {

1
apparmor.d/profiles-s-z/sudo
View file

@ -78,6 +78,7 @@ profile sudo @{exec_path} {
@{run}/systemd/userdb/ r,
@{run}/systemd/userdb/io.systemd.DynamicUser rw,
@{run}/resolvconf/resolv.conf r,
/dev/ r, # interactive login
/dev/ptmx rw,