felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update profiles for apparmor3

Browse source
This commit is contained in:
Mikhail Morfikov 2020-12-10 22:33:39 +01:00
parent 503cf496bf
commit 7067edcf70
No known key found for this signature in database
GPG key ID: 32D9CB634796CCA1
776 changed files with 6867 additions and 5199 deletions
Download patch file Download diff file Expand all files Collapse all files

20
apparmor.d/cron
View file

@ -9,16 +9,16 @@
#
# ------------------------------------------------------------------
#abi <abi/3.0>,
abi <abi/3.0>,
#include <tunables/global>
include <tunables/global>
@{exec_path} = /{usr/,}sbin/cron
profile cron @{exec_path} {
#include <abstractions/base>
#include <abstractions/nameservice-strict>
#include <abstractions/authentication>
#include <abstractions/wutmp>
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/authentication>
include <abstractions/wutmp>
capability setuid,
capability setgid,
@ -26,6 +26,8 @@ profile cron @{exec_path} {
capability audit_write,
capability sys_resource,
network netlink raw,
@{exec_path} mr,
/{usr/,}bin/{,ba,da}sh rix,
@ -77,7 +79,7 @@ profile cron @{exec_path} {
/etc/security/limits.d/ r,
profile run-parts {
#include <abstractions/base>
include <abstractions/base>
/{usr/,}bin/run-parts mr,
@ -121,8 +123,8 @@ profile cron @{exec_path} {
# file_inherit
owner /tmp/#[0-9]*[0-9] rw,
#include if exists <local/cron_run-parts>
include if exists <local/cron_run-parts>
}
#include if exists <local/cron>
include if exists <local/cron>
}