feat(profiles): better system nss rules in nameservice-strict.

This commit is contained in:
Alexandre Pujol 2022-06-03 19:38:34 +01:00
parent 1ca1aa8892
commit 879416b062
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
22 changed files with 18 additions and 50 deletions

View file

@ -74,8 +74,6 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/dbus-1/services/ rw,
@{run}/systemd/inhibit/[0-9]*.ref rw,
@{run}/systemd/sessions/*.ref rw,
@{run}/systemd/userdb/io.systemd.DynamicUser w,
@{run}/systemd/userdb/io.systemd.Machine rw,
@{run}/systemd/users/@{uid} r,
@{sys}/kernel/security/apparmor/.access rw,