feat(profiles): general update.

This commit is contained in:
Alexandre Pujol 2023-01-27 22:31:55 +00:00
parent 3c0b67895d
commit 7a24f98f48
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
5 changed files with 15 additions and 11 deletions

View file

@ -60,6 +60,7 @@ profile snapd @{exec_path} {
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/cp rix,
/{usr/,}bin/gzip rix,
/{usr/,}bin/journalctl rPx,
/{usr/,}bin/mount rix,
/{usr/,}bin/snap rPx,
/{usr/,}bin/sync rix,
@ -86,6 +87,7 @@ profile snapd @{exec_path} {
/usr/share/dbus-1/services/*snap* r,
/usr/share/polkit-1/actions/{,**/} r,
/etc/apparmor.d/*snapd.snap* r,
/etc/dbus-1/system.d/{,**/} r,
/etc/fstab r,
/etc/mime.types r,
@ -147,6 +149,7 @@ profile snapd @{exec_path} {
@{PROC}/sys/kernel/random/boot_id r,
@{PROC}/sys/kernel/seccomp/actions_avail r,
@{PROC}/version r,
owner @{PROC}/@{pids}/cmdline r,
owner @{PROC}/@{pids}/mountinfo r,
/dev/loop-control rw,