felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): replace @{bin} by @{sbin} on additional profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-28 22:41:40 +02:00
parent aeb3614a07
commit 7b55b351ef
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 14 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/firewall/ufw
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{bin}/ufw @{exec_path} = @{sbin}/ufw
profile ufw @{exec_path} flags=(attach_disconnected) { profile ufw @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/consoles>

2
apparmor.d/groups/grub/grub-bios-setup
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{bin}/grub-bios-setup @{exec_path} = @{sbin}/grub-bios-setup
profile grub-bios-setup @{exec_path} { profile grub-bios-setup @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/consoles>

2
apparmor.d/groups/pacman/pacman
View file

@ -75,7 +75,7 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
@{sbin}/iconvconfig rix, @{sbin}/iconvconfig rix,
@{bin}/install-catalog rPx, @{bin}/install-catalog rPx,
@{bin}/install-info rPx, @{bin}/install-info rPx,
@{bin}/iscsi-iname rix, @{sbin}/iscsi-iname rix,
@{bin}/journalctl rPx, @{bin}/journalctl rPx,
@{bin}/killall rix, @{bin}/killall rix,
@{sbin}/ldconfig rix, @{sbin}/ldconfig rix,

2
apparmor.d/groups/systemd/systemd-sleep-tlp
View file

@ -13,7 +13,7 @@ profile systemd-sleep-tlp @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
@{sh_path} rix, @{sh_path} rix,
@{bin}/tlp rPUx, @{sbin}/tlp rPUx,
include if exists <local/systemd-sleep-tlp> include if exists <local/systemd-sleep-tlp>
} }

3
apparmor.d/groups/systemd/systemd-udevd
View file

@ -46,12 +46,13 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected) {
@{sbin}/dmsetup rPx, @{sbin}/dmsetup rPx,
@{sbin}/ethtool rix, @{sbin}/ethtool rix,
@{bin}/issue-generator rPx, @{bin}/issue-generator rPx,
@{sbin}/kdump-config rPUx,
@{bin}/kmod rPx, @{bin}/kmod rPx,
@{bin}/logger rix, @{bin}/logger rix,
@{bin}/ls rix, @{bin}/ls rix,
@{sbin}/lvm rPx, @{sbin}/lvm rPx,
@{bin}/mknod rix, @{bin}/mknod rix,
@{bin}/multipath rPx, @{sbin}/multipath rPx,
@{bin}/nfsrahead rix, @{bin}/nfsrahead rix,
@{bin}/nvidia-modprobe rPx -> child-modprobe-nvidia, @{bin}/nvidia-modprobe rPx -> child-modprobe-nvidia,
@{bin}/setfacl rix, @{bin}/setfacl rix,

2
apparmor.d/profiles-a-f/atd
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{bin}/atd @{exec_path} = @{sbin}/atd
profile atd @{exec_path} { profile atd @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/authentication> include <abstractions/authentication>

2
apparmor.d/profiles-a-f/blkdeactivate
View file

@ -20,7 +20,7 @@ profile blkdeactivate @{exec_path} flags=(complain) {
@{bin}/touch rix, @{bin}/touch rix,
@{bin}/lsblk rPx, @{bin}/lsblk rPx,
@{sbin}/lvm rPx, @{sbin}/lvm rPx,
@{bin}/multipathd rPx, @{sbin}/multipathd rPx,
@{bin}/sort rix, @{bin}/sort rix,
@{bin}/umount rPx, @{bin}/umount rPx,

2
apparmor.d/profiles-g-l/kerneloops
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{bin}/kerneloops @{exec_path} = @{sbin}/kerneloops
profile kerneloops @{exec_path} { profile kerneloops @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus-system> include <abstractions/bus-system>

2
apparmor.d/profiles-m-r/multipath
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{bin}/multipath @{exec_path} = @{sbin}/multipath
profile multipath @{exec_path} flags=(attach_disconnected) { profile multipath @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/disks-write> include <abstractions/disks-write>

2
apparmor.d/profiles-m-r/multipathd
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{bin}/multipathd @{exec_path} = @{sbin}/multipathd
profile multipathd @{exec_path} { profile multipathd @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/disks-read> include <abstractions/disks-read>

2
apparmor.d/profiles-m-r/os-prober
View file

@ -43,7 +43,7 @@ profile os-prober @{exec_path} flags=(attach_disconnected) {
@{bin}/mkdir rix, @{bin}/mkdir rix,
@{bin}/mktemp rix, @{bin}/mktemp rix,
@{bin}/mount rix, @{bin}/mount rix,
@{bin}/multipath rPx, @{sbin}/multipath rPx,
@{bin}/readlink rix, @{bin}/readlink rix,
@{bin}/rm rix, @{bin}/rm rix,
@{bin}/rmdir rix, @{bin}/rmdir rix,

2
apparmor.d/profiles-m-r/qemu-ga
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{bin}/qemu-ga @{exec_path} = @{sbin}/qemu-ga
profile qemu-ga @{exec_path} { profile qemu-ga @{exec_path} {
include <abstractions/base> include <abstractions/base>

2
apparmor.d/profiles-s-z/tlp
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = @{bin}/tlp @{exec_path} = @{sbin}/tlp
profile tlp @{exec_path} flags=(attach_disconnected) { profile tlp @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus-system> include <abstractions/bus-system>