felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update profiles for apparmor3

Browse source
This commit is contained in:
Mikhail Morfikov 2020-12-10 22:33:39 +01:00
parent 503cf496bf
commit 7067edcf70
No known key found for this signature in database
GPG key ID: 32D9CB634796CCA1
776 changed files with 6867 additions and 5199 deletions
Download patch file Download diff file Expand all files Collapse all files

30
apparmor.d/update-smart-drivedb
View file

@ -9,13 +9,14 @@
#
# ------------------------------------------------------------------
#abi <abi/3.0>,
abi <abi/3.0>,
#include <tunables/global>
include <tunables/global>
@{exec_path} = /{usr/,}sbin/update-smart-drivedb
profile update-smart-drivedb @{exec_path} {
#include <abstractions/base>
include <abstractions/base>
include <abstractions/consoles>
@{exec_path} r,
/{usr/,}bin/{,ba,da}sh rix,
@ -32,6 +33,7 @@ profile update-smart-drivedb @{exec_path} {
/{usr/,}bin/mv rix,
/{usr/,}bin/cmp rix,
/{usr/,}sbin/ r,
/{usr/,}sbin/smartctl rPx,
/{usr/,}bin/gpg rCx -> gpg,
@ -43,9 +45,13 @@ profile update-smart-drivedb @{exec_path} {
owner /var/lib/smartmontools/drivedb/.gnupg.[0-9]*.tmp/{,**} rw,
# For shell pwd
/root/ r,
profile gpg {
#include <abstractions/base>
include <abstractions/base>
include <abstractions/consoles>
/{usr/,}bin/gpg mr,
@ -61,10 +67,16 @@ profile update-smart-drivedb @{exec_path} {
}
profile browse {
#include <abstractions/base>
#include <abstractions/nameservice-strict>
#include <abstractions/openssl>
#include <abstractions/ssl_certs>
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,
network inet6 dgram,
network inet stream,
network inet6 stream,
/{usr/,}bin/wget mr,
/{usr/,}bin/curl mr,
@ -85,5 +97,5 @@ profile update-smart-drivedb @{exec_path} {
}
#include if exists <local/update-smart-drivedb>
include if exists <local/update-smart-drivedb>
}