felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update sbin list and ensure the profiles use the good variable (sbin or bin).

Browse source
This commit is contained in:
Alexandre Pujol 2025-06-05 00:35:43 +02:00
parent c8f2a435f8
commit 6ed873aad3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
54 changed files with 75 additions and 70 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/network/openvpn
View file

@ -61,7 +61,7 @@ profile openvpn @{exec_path} flags=(attach_disconnected) {
@{run}/openvpn/*.{pid,status} rw,
@{run}/systemd/journal/dev-log r,
@{sbin}/ip rix,
@{bin}/ip rix,
@{bin}/systemd-ask-password rPx,
@{lib}/nm-openvpn-service-openvpn-helper rPx,
/etc/openvpn/force-user-traffic-via-vpn.sh rCx -> force-user-traffic-via-vpn,
@ -83,7 +83,7 @@ profile openvpn @{exec_path} flags=(attach_disconnected) {
@{sh_path} rix,
@{bin}/cut rix,
@{sbin}/ip rix,
@{bin}/ip rix,
@{bin}/which rix,
@{sbin}/xtables-nft-multi rix,
@ -110,7 +110,7 @@ profile openvpn @{exec_path} flags=(attach_disconnected) {
@{bin}/{,e}grep rix,
@{bin}/cut rix,
@{bin}/env rix,
@{sbin}/ip rix,
@{bin}/ip rix,
@{sbin}/nft rix,
@{bin}/sed rix,