felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update pkexec.

Browse source
This commit is contained in:
Alexandre Pujol 2024-10-16 19:22:52 +01:00
parent 682c98b320
commit 6e2d817805
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 7 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/profiles-m-r/pkexec
View file

@ -8,15 +8,15 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pkexec
profile pkexec @{exec_path} flags=(complain) {
profile pkexec @{exec_path} {
include <abstractions/base>
include <abstractions/app/pkexec>
audit capability sys_nice,
capability sys_nice,
signal (send) set=(term, kill) peer=polkit-agent-helper,
signal send set=(term, kill) peer=polkit-agent-helper,
ptrace (read),
ptrace read,
@{exec_path} mr,
@ -28,7 +28,7 @@ profile pkexec @{exec_path} flags=(complain) {
/etc/default/locale r,
@{PROC}/@{pid}/fdinfo/@{int} r,
@{PROC}/@{pids}/stat r,
@{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/fd/ r,
include if exists <local/pkexec>