felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update profiles for apparmor3

Browse source
This commit is contained in:
Mikhail Morfikov 2020-12-10 22:33:39 +01:00
parent 503cf496bf
commit 7067edcf70
No known key found for this signature in database
GPG key ID: 32D9CB634796CCA1
776 changed files with 6867 additions and 5199 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/hddtemp
View file

@ -9,13 +9,13 @@
#
# ------------------------------------------------------------------
#abi <abi/3.0>,
abi <abi/3.0>,
#include <tunables/global>
include <tunables/global>
@{exec_path} = /{usr/,}sbin/hddtemp
profile hddtemp @{exec_path} {
#include <abstractions/base>
include <abstractions/base>
# To remove the following errors:
# /dev/sda: Permission denied
@ -28,6 +28,9 @@ profile hddtemp @{exec_path} {
# It looks like hddtemp works just fine without it.
deny capability sys_admin,
network inet stream,
network inet6 stream,
@{exec_path} mr,
# Monitored hard drives
@ -39,5 +42,5 @@ profile hddtemp @{exec_path} {
# Needed when the hddtemp daemon is started in the TCP/IP mode
/etc/gai.conf r,
#include if exists <local/hddtemp>
include if exists <local/hddtemp>
}