Add new profiles

This commit is contained in:
nobody43 2023-01-06 03:55:12 +03:00 committed by Alex
parent 7a24f98f48
commit 80de79b66a
10 changed files with 324 additions and 0 deletions

View file

@ -0,0 +1,27 @@
# apparmor.d - Full set of apparmor profiles
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{,usr/}{,s}bin/hostapd
profile hostapd @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
capability net_admin,
capability net_raw,
@{exec_path} mr,
/dev/rfkill r,
/etc/hostapd.conf r,
/etc/hostapd/{,*} r,
@{run}/hostapd/{,**} rw,
@{run}/hostapd.pid rw,
include if exists <local/hostapd>
}

View file

@ -0,0 +1,21 @@
# vim:syntax=apparmor
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{,usr/}{,local/}bin/lsd
profile lsd @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/consoles>
capability dac_read_search,
@{exec_path} mr,
/ r,
/**/ r,
include if exists <local/lsd>
}