felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): make profile entrypoint more universal.

Browse source
This commit is contained in:
Alexandre Pujol 2023-02-04 23:28:17 +00:00
parent e031c129ed
commit 6e56cfccc9
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
70 changed files with 122 additions and 147 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/network/nm-openvpn-service
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/nm-openvpn-service
@{exec_path} = @{libexec}/nm-openvpn-service
profile nm-openvpn-service @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
@ -18,10 +18,10 @@ profile nm-openvpn-service @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/{,ba,da}sh rix,
@{libexec}/nm-openvpn-auth-dialog rPx,
@{libexec}/nm-openvpn-service-openvpn-helper rPx,
/{usr/,}{s,}bin/openvpn rPx,
/{usr/,}lib/nm-openvpn-auth-dialog rPx,
/{usr/,}lib/nm-openvpn-service-openvpn-helper rPx,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/kmod rPx,
@{run}/NetworkManager/nm-openvpn-@{uuid} rw,