felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): ubuntu: update upgrade process.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-25 15:17:38 +02:00
parent 2a5f45b654
commit 846b9e2cf4
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 23 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/ubuntu/package-data-downloader
View file

@ -14,6 +14,8 @@ profile package-data-downloader @{exec_path} {
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/python> include <abstractions/python>
capability dac_read_search,
@{exec_path} mr, @{exec_path} mr,
/var/lib/update-notifier/package-data-downloads/{,**} rw, /var/lib/update-notifier/package-data-downloads/{,**} rw,

2
apparmor.d/groups/ubuntu/ubuntu-report
View file

@ -21,7 +21,7 @@ profile ubuntu-report @{exec_path} {
@{bin}/dpkg rPx -> child-dpkg, @{bin}/dpkg rPx -> child-dpkg,
owner @{user_cache_dirs}/ubuntu-report/{,*} r, owner @{user_cache_dirs}/ubuntu-report/{,*} rw,
include if exists <local/ubuntu-report> include if exists <local/ubuntu-report>
} }

20
apparmor.d/groups/ubuntu/update-notifier-crash Normal file
View file

@ -0,0 +1,20 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{lib}/update-notifier/update-notifier-crash
profile update-notifier-crash @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/usr/share/apport/apport-checkreports Px,
include if exists <local/update-notifier-crash>
}
# vim:syntax=apparmor