felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update profiles for apparmor3

Browse source
This commit is contained in:
Mikhail Morfikov 2020-12-10 22:33:39 +01:00
parent 503cf496bf
commit 7067edcf70
No known key found for this signature in database
GPG key ID: 32D9CB634796CCA1
776 changed files with 6867 additions and 5199 deletions
Download patch file Download diff file Expand all files Collapse all files

36
apparmor.d/adequate
View file

@ -9,16 +9,16 @@
#
# ------------------------------------------------------------------
#abi <abi/3.0>,
abi <abi/3.0>,
#include <tunables/global>
include <tunables/global>
@{exec_path} = /{usr/,}bin/adequate
profile adequate @{exec_path} flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/perl>
#include <abstractions/nameservice-strict>
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/perl>
include <abstractions/nameservice-strict>
#capability sys_tty_config,
@ -50,8 +50,8 @@ profile adequate @{exec_path} flags=(complain) {
profile ldd flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
include <abstractions/base>
include <abstractions/consoles>
/{usr/,}bin/ldd mr,
@ -70,10 +70,10 @@ profile adequate @{exec_path} flags=(complain) {
}
profile frontend flags=(complain) {
#include <abstractions/base>
#include <abstractions/consoles>
#include <abstractions/perl>
#include <abstractions/nameservice-strict>
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/perl>
include <abstractions/nameservice-strict>
/usr/share/debconf/frontend r,
/{usr/,}bin/perl r,
@ -89,10 +89,10 @@ profile adequate @{exec_path} flags=(complain) {
/usr/share/debconf/templates/adequate.templates r,
# The following is needed when debconf uses GUI frontends.
#include <abstractions/gtk>
#include <abstractions/fonts>
#include <abstractions/fontconfig-cache-read>
#include <abstractions/freedesktop.org>
include <abstractions/gtk>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read>
include <abstractions/freedesktop.org>
capability dac_read_search,
/{usr/,}bin/lsb_release rPx -> child-lsb_release,
/{usr/,}bin/hostname rPx,
@ -104,11 +104,11 @@ profile adequate @{exec_path} flags=(complain) {
}
profile pkg-config flags=(complain) {
#include <abstractions/base>
include <abstractions/base>
/{usr/,}bin/pkg-config mr,
}
#include if exists <local/adequate>
include if exists <local/adequate>
}