felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update some core profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-11-12 20:42:31 +00:00 • committed by nobody43
parent 06dd90bae1
commit 771673c91f
11 changed files with 33 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-s-z/snap
View file

@ -29,6 +29,7 @@ profile snap @{exec_path} {
mount options=(ro, silent) -> /tmp/snapd-auto-import-mount-@{int}/,
#aa:dbus own bus=session name=io.snapcraft.Launcher
#aa:dbus own bus=session name=io.snapcraft.SessionAgent
#aa:dbus own bus=session name=io.snapcraft.Settings
#aa:dbus talk bus=session name=org.freedesktop.systemd1 label="@{p_systemd_user}"
@ -45,6 +46,7 @@ profile snap @{exec_path} {
@{bin}/gpg{,2} rCx -> gpg,
@{bin}/systemctl rCx -> systemctl,
@{lib_dirs}/** mr,
@{lib_dirs}/snapd/snap-confine rPx,
@{lib_dirs}/snapd/snap-seccomp rPx,
@{lib_dirs}/snapd/snapd rPx,
@ -108,6 +110,9 @@ profile snap @{exec_path} {
network unix stream,
owner @{run}/user/@{uid}/systemd/notify rw,
owner @{run}/user/@{uid}/systemd/private rw,
include if exists <local/snap_systemctl>
}