update apparmor profiles

Signed-off-by: Alexandre Pujol <alexandre@pujol.io>
This commit is contained in:
Mikhail Morfikov 2022-01-08 13:41:21 +01:00 committed by Alexandre Pujol
parent 697b296298
commit 76cd5c7029
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 187 additions and 12 deletions

View file

@ -32,6 +32,7 @@ profile sudo @{exec_path} {
signal,
@{exec_path} mr,
@{libexec}/sudo/** mr,
# Shells to use
/{usr/,}bin/{,b,d,rb}ash rpux,
@ -58,6 +59,7 @@ profile sudo @{exec_path} {
@{PROC}/@{pid}/fd/ r,
@{PROC}/@{pids}/stat r,
@{PROC}/1/limits r,
# File Inherit
owner /dev/tty[0-9]* rw,