felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update apparmor profiles

Browse source
This commit is contained in:
Alexandre Pujol 2021-10-22 15:41:13 +01:00
parent 6c34573727
commit 7da59b4984
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 122 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-m-r/nft
View file

@ -16,6 +16,8 @@ profile nft @{exec_path} {
network netlink raw,
ptrace(read),
@{exec_path} mr,
owner /etc/iproute2/** r,

2
apparmor.d/profiles-m-r/polkitd
View file

@ -17,7 +17,7 @@ profile polkitd @{exec_path} {
capability sys_ptrace,
audit deny capability net_admin,
ptrace (read) peer=unconfined,
ptrace (read),
@{exec_path} mr,

1
apparmor.d/profiles-m-r/repo
View file

@ -80,6 +80,7 @@ profile repo @{exec_path} {
/{usr/,}bin/gpg mr,
owner @{HOME}/@{XDG_GPG_DIR}/** rwkl -> @{HOME}/@{XDG_GPG_DIR}/**,
owner @{HOME}/.repoconfig/gnupg/** rwkl -> @{HOME}/.repoconfig/gnupg/**,
owner /tmp/.git_vtag_tmp* r,