feat(profiles): better system nss rules in nameservice-strict.

This commit is contained in:
Alexandre Pujol 2022-06-03 19:38:34 +01:00
parent 1ca1aa8892
commit 879416b062
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
22 changed files with 18 additions and 50 deletions

View file

@ -26,8 +26,6 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
@{exec_path} mr,
/etc/machine-id r,
/etc/nsswitch.conf r,
/etc/passwd r,
/etc/systemd/logind.conf r,
/etc/systemd/sleep.conf r,
@ -67,9 +65,6 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
@{run}/systemd/seats/seat[0-9]* rw,
@{run}/systemd/sessions/{,*} rw,
@{run}/systemd/sessions/*.ref rw,
@{run}/systemd/userdb/ r,
@{run}/systemd/userdb/io.systemd.DynamicUser rw,
@{run}/systemd/userdb/io.systemd.Machine rw,
@{run}/systemd/users/ rw,
@{run}/systemd/users/.#* rw,
@{run}/systemd/users/@{uid} rw,