felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Various fixes

Browse source 
* nvidia-strict: nvidia libraries get argv from /proc/self
* iwd:
  * sends lots of UDP on packet sockets
  * writes to accept_ra and optimistic_dad
  * DNS daemons other than systemd-resolvd may require iwd to use resolvconf
* lynx: now handles brotli'd HTML as well as gzipped
This commit is contained in:
remph 2025-01-03 06:41:22 +00:00 • committed by Alex
parent f1f84045fc
commit 8730fa55e5
3 changed files with 9 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/network/iwd
View file

@ -21,8 +21,10 @@ profile iwd @{exec_path} {
network netlink raw,
network netlink dgram,
network alg seqpacket,
network packet dgram,
@{exec_path} mr,
@{bin}/resolvconf rPx,
/etc/iwd/{,**} r,
/var/lib/iwd/{,**} rw,
@ -33,9 +35,13 @@ profile iwd @{exec_path} {
@{PROC}/sys/net/ipv{4,6}/conf/wlan@{int}/arp_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan@{int}/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan@{int}/ndisc_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan@{int}/accept_ra rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlan@{int}/optimistic_dad rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/arp_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/drop_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/ndisc_* rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/accept_ra rw,
@{PROC}/sys/net/ipv{4,6}/conf/wlp*/optimistic_dad rw,
/dev/rfkill rw,