felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(profile): integration fix.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-23 15:27:00 +01:00
parent 291713d902
commit 7684de3459
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/network/netplan.script
View file

@ -40,6 +40,8 @@ profile netplan.script @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/app/systemctl> include <abstractions/app/systemctl>
capability net_admin,
include if exists <local/netplan.script_systemctl> include if exists <local/netplan.script_systemctl>
} }

1
apparmor.d/groups/snap/snap
View file

@ -37,6 +37,7 @@ profile snap @{exec_path} flags=(attach_disconnected) {
#aa:dbus talk bus=session name=io.snapcraft.PrivilegedDesktopLauncher label=snap.snap-store.snap-store #aa:dbus talk bus=session name=io.snapcraft.PrivilegedDesktopLauncher label=snap.snap-store.snap-store
#aa:dbus talk bus=session name=org.freedesktop.systemd1 label="@{p_systemd_user}" #aa:dbus talk bus=session name=org.freedesktop.systemd1 label="@{p_systemd_user}"
#aa:dbus talk bus=system name=org.freedesktop.systemd1 label="@{p_systemd}"
dbus send bus=session path=/org/freedesktop/portal/documents dbus send bus=session path=/org/freedesktop/portal/documents
interface=org.freedesktop.portal.Documents interface=org.freedesktop.portal.Documents

2
apparmor.d/groups/snap/snapd
View file

@ -187,6 +187,8 @@ profile snapd @{exec_path} {
capability net_admin, capability net_admin,
capability sys_resource, capability sys_resource,
network netlink raw,
/etc/systemd/system/{,**/} r, /etc/systemd/system/{,**/} r,
/etc/systemd/system/snap* rw, /etc/systemd/system/snap* rw,
/etc/systemd/user/{,**/} rw, /etc/systemd/user/{,**/} rw,

4
apparmor.d/groups/systemd/hostnamectl
View file

@ -16,6 +16,10 @@ profile hostnamectl @{exec_path} {
capability net_admin, capability net_admin,
#aa:dbus talk bus=system name=org.freedesktop.hostname1 label=systemd-hostnamed #aa:dbus talk bus=system name=org.freedesktop.hostname1 label=systemd-hostnamed
dbus send bus=system path=/org/freedesktop/hostname1
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=org.freedesktop.hostname1),
@{exec_path} mr, @{exec_path} mr,