felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

systemd: better profilling and rename journalctl.

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-21 21:55:50 +01:00
parent 1c9df4b3b9
commit 7029d40c5e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 14 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/groups/systemd/systemd-machined
View file

@ -11,14 +11,24 @@ profile systemd-machined @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/systemd-common>
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability fsetid,
capability kill,
capability mknod,
capability setgid,
capability sys_admin,
capability sys_chroot,
capability sys_ptrace,
@{exec_path} mr,
/etc/machine-id r,
@{run}/systemd/machines/{,**} r,
@{run}/systemd/userdb/io.systemd.Machine rw,
@{run}/systemd/machines/ r,
include if exists <local/systemd-machined>
}