felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-01-24 20:07:10 +00:00
parent 9343807632
commit 807bf7f1c8
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 26 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

25
apparmor.d/groups/virt/libvirtd
View file

@ -160,23 +160,26 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/+dmi:id r,
@{run}/udev/data/+drm:* r,
@{run}/udev/data/+hid:* r,
@{run}/udev/data/+input* r, # for mouse, keyboard, touchpad
@{run}/udev/data/+input* r, # For mouse, keyboard, touchpad
@{run}/udev/data/+leds:* r,
@{run}/udev/data/+pci* r,
@{run}/udev/data/+platform* r,
@{run}/udev/data/+rfkill:* r,
@{run}/udev/data/+sound:card* r, # for sound
@{run}/udev/data/+sound:card* r, # For sound
@{run}/udev/data/+thunderbolt:* r,
@{run}/udev/data/c1:[0-9]* r,
@{run}/udev/data/c10:[0-9]* r,
@{run}/udev/data/c116:[0-9]* r, # for ALSA
@{run}/udev/data/c13:[0-9]* r, # for /dev/input/*
@{run}/udev/data/c2[0-9]*:[0-9]* r,
@{run}/udev/data/c23[0-9]:[0-9]* r,
@{run}/udev/data/c1:[0-9]* r , # For RAM disk
@{run}/udev/data/c10:[0-9]* r, # For non-serial mice, misc features
@{run}/udev/data/c13:[0-9]* r, # For /dev/input/*
@{run}/udev/data/c29:* r, # For /dev/fb[0-9]*
@{run}/udev/data/c90:[0-9]* r, # For RAM, ROM, Flash
@{run}/udev/data/c116:[0-9]* r, # For ALSA
@{run}/udev/data/c226:[0-9]* r, # For /dev/dri/card[0-9]*
@{run}/udev/data/c23[4-9]:[0-9]* r, # For dynamic assignment range 234 to 254
@{run}/udev/data/c24[0-9]:[0-9]* r,
@{run}/udev/data/c50[0-9]:[0-9]* r,
@{run}/udev/data/c51[0-9]:[0-9]* r,
@{run}/udev/data/c90:[0-9]* r,
@{run}/udev/data/c25[0-4]:[0-9]* r,
@{run}/udev/data/c3[0-9]*:[0-9]* r, # For dynamic assignment range 384 to 511
@{run}/udev/data/c4[0-9]*:[0-9]* r,
@{run}/udev/data/c5[0-9]*:[0-9]* r,
@{run}/udev/data/n[0-9]* r,
@{sys}/bus/[a-z]*/devices/ r,