felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): update snap profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-05 23:33:58 +01:00
parent 245db40b2d
commit 7b4979cc63
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 34 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

16
apparmor.d/profiles-s-z/snapd
View file

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{bin_dirs} = @{bin}/ /snap/snapd/@{int}@{bin}/
@{lib_dirs} = @{lib}/ /snap/snapd/@{int}@{lib}/
@{bin_dirs} = @{bin}/ /snap/snapd/@{int}@{bin}
@{lib_dirs} = @{lib}/ /snap/snapd/@{int}@{lib}
@{exec_path} = @{lib_dirs}/snapd/snapd
profile snapd @{exec_path} {
@ -74,6 +74,7 @@ profile snapd @{exec_path} {
@{bin}/cp rix,
@{bin}/gzip rix,
@{bin}/journalctl rPx,
@{bin}/kmod rPx,
@{bin}/mount rix,
@{bin}/runuser rCx -> runuser,
@{bin}/snap rPx,
@ -87,7 +88,7 @@ profile snapd @{exec_path} {
@{bin}/update-desktop-database rPx,
@{bin_dirs}/fc-cache-* mr,
@{bin_dirs}/snap rPx,
@{bin_dirs}/snap rPx -> snap,
@{bin_dirs}/xdelta3 rix,
@{lib_dirs}/@{multiarch}/** mr,
@{lib_dirs}/@{multiarch}/ld-*.so rix,
@ -108,6 +109,7 @@ profile snapd @{exec_path} {
/etc/mime.types r,
/etc/modprobe.d/{,**/} r,
/etc/modules-load.d/{,**/} r,
/etc/modules-load.d/*snap* rw,
/etc/systemd/system/{,**/} r,
/etc/systemd/system/snap* rw,
/etc/systemd/user/{,**/} r,
@ -177,5 +179,13 @@ profile snapd @{exec_path} {
/dev/loop-control rw,
profile runuser {
include <abstractions/base>
@{bin}/runuser mr,
include if exists <local/snapd_runuser>
}
include if exists <local/snapd>
}