felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2021-09-19 20:37:32 +01:00
parent 1956680160
commit 723695c626
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 28 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/pacman/pacman
View file

@ -48,6 +48,7 @@ profile pacman @{exec_path} {
/{usr/,}bin/dot rix,
/{usr/,}bin/env rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/setcap rix,
/{usr/,}bin/vercmp rix,
/{usr/,}bin/xmlcatalog rix,
/{usr/,}lib/ghc-*/bin/ghc-pkg rix,

11
apparmor.d/groups/pacman/pacman-hook-depmod
View file

@ -10,11 +10,16 @@ include <tunables/global>
profile pacman-hook-depmod @{exec_path} {
include <abstractions/base>
capability dac_read_search,
@{exec_path} mr,
/{usr/,}bin/bash rix,
/{usr/,}bin/kmod rPx,
/{usr/,}bin/depmod rPx,
/{usr/,}bin/basename rix,
/{usr/,}bin/bash rix,
/{usr/,}bin/depmod rPx,
/{usr/,}bin/kmod rPx,
/dev/tty rw,
# Inherit Silencer
deny network inet6 stream,

7
apparmor.d/groups/pacman/pacman-hook-mkinitcpio-remove
View file

@ -10,13 +10,18 @@ include <tunables/global>
profile pacman-hook-mkinitcpio-remove @{exec_path} {
include <abstractions/base>
capability dac_read_search,
@{exec_path} mr,
/{usr/,}bin/bash rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/cmp rix,
/{usr/,}bin/mv rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/sed rix,
/usr/share/mkinitcpio/*.preset r,
/etc/mkinitcpio.d/*.preset rw,
/boot/vmlinuz-* rw,
/boot/initramfs-*.img rw,