felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update pacman profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2025-07-12 20:09:41 +02:00 • committed by Alex
parent 7a47914542
commit 8020c2c63d
3 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/groups/pacman/makepkg
View file

@ -11,6 +11,7 @@ profile makepkg @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/path>
include <abstractions/perl> include <abstractions/perl>
include <abstractions/python> include <abstractions/python>
include <abstractions/shells> include <abstractions/shells>
@ -72,8 +73,8 @@ profile makepkg @{exec_path} {
owner @{run}/user/@{uid}/gnupg/d.@{rand}/S.scdaemon rw, owner @{run}/user/@{uid}/gnupg/d.@{rand}/S.scdaemon rw,
owner @{run}/user/@{uid}/gnupg/S.scdaemon rw, owner @{run}/user/@{uid}/gnupg/S.scdaemon rw,
owner @{PROC}/@{pid}/fd/ r, @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw, @{PROC}/@{pid}/task/@{tid}/comm rw,
include if exists <local/makepkg_gpg> include if exists <local/makepkg_gpg>
} }

1
apparmor.d/groups/pacman/paccache
View file

@ -36,6 +36,7 @@ profile paccache @{exec_path} flags=(attach_disconnected) {
/etc/pacman.conf r, /etc/pacman.conf r,
/etc/pacman.d/{,**} r, /etc/pacman.d/{,**} r,
/etc/pacman.d/gnupg/** rwlk -> /etc/pacman.d/gnupg/**,
/var/cache/pacman/pkg/{,*} rw, /var/cache/pacman/pkg/{,*} rw,
/var/lib/pacman/{,**} r, /var/lib/pacman/{,**} r,

2
apparmor.d/groups/pacman/pacman
View file

@ -187,7 +187,7 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
include if exists <local/pacman_gpg> include if exists <local/pacman_gpg>
} }
profile systemctl { profile systemctl flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/app/systemctl> include <abstractions/app/systemctl>