felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): start implementing systemctl subprofile instead of using child-systemctl.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-05 17:45:02 +00:00
parent a7e37528d5
commit 70963a50b6
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
11 changed files with 75 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/systemd/systemd-udevd
View file

@ -131,14 +131,12 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
profile systemctl flags=(attach_disconnected,complain) {
include <abstractions/base>
include <abstractions/systemd-common>
include <abstractions/systemctl>
capability net_admin,
capability sys_ptrace,
@{bin}/systemctl mr,
/ r,
# / r,
@{PROC}/sys/kernel/cap_last_cap r,