felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-12 22:59:07 +01:00
parent 6c397882ad
commit 6db83003c7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
33 changed files with 98 additions and 56 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/pacman/mkinitcpio
View file

@ -76,6 +76,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
/etc/lvm/lvm.conf r,
/etc/mkinitcpio.conf r,
/etc/mkinitcpio.d/{,**} r,
/etc/mkinitcpio.conf.d/{,**} r,
/etc/modprobe.d/{,*} r,
/etc/plymouth/plymouthd.conf r,
/etc/vconsole.conf r,
@ -96,13 +97,15 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
# Manage /boot
/ r,
/boot/ r,
/boot/initramfs-*.img* rw,
/boot/vmlinuz-* r,
# Temp files
owner @{run}/initramfs/{,**} rw,
owner @{run}/mkinitcpio.*/{,**} rw,
owner /tmp/mkinitcpio.*/{,**} rw,
owner @{run}/mkinitcpio.@{rand6}/{,**} rw,
owner /tmp/mkinitcpio.@{rand6} rw,
owner /tmp/mkinitcpio.@{rand6}/{,**} rw,
@{sys}/class/block/ r,
@{sys}/devices/{,**} r,

3
apparmor.d/groups/pacman/pacman-hook-code
View file

@ -15,11 +15,12 @@ profile pacman-hook-code @{exec_path} {
@{exec_path} mr,
@{bin}/env r,
@{bin}/python3.[0-9]* rix,
@{lib}/code/product.json rw,
/usr/share/code-{features,marketplace}/* r,
/usr/share/code-{features,marketplace}/{,*} r,
/usr/share/code-{features,marketplace}/cache.json rw,
include if exists <local/pacman-hook-code>