feat(profiles): better system nss rules in nameservice-strict.

2022-06-03 19:38:34 +01:00 · 2022-06-03 19:38:34 +01:00 · 879416b062
commit 879416b062
parent 1ca1aa8892
22 changed files with 18 additions and 50 deletions
--- a/apparmor.d/groups/network/nm-openvpn-service
+++ b/apparmor.d/groups/network/nm-openvpn-service
@ -24,7 +24,6 @@ profile nm-openvpn-service @{exec_path} {
  /{usr/,}lib/nm-openvpn-service-openvpn-helper rPx,
  /{usr/,}bin/kmod rPx,

-  @{run}/systemd/userdb/ r,
  @{run}/NetworkManager/nm-openvpn-@{uuid} rw,

  /dev/net/tun rw,