felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): better system nss rules in nameservice-strict.

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-03 19:38:34 +01:00
parent 1ca1aa8892
commit 879416b062
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
22 changed files with 18 additions and 50 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/profiles-s-z/su
View file

@ -60,9 +60,6 @@ profile su @{exec_path} {
/dev/{,pts/}ptmx rw,
@{run}/dbus/system_bus_socket rw,
@{run}/systemd/userdb/ r,
@{run}/systemd/userdb/io.systemd.Machine rw,
@{run}/systemd/userdb/io.systemd.DynamicUser rw,
dbus (send)
bus=system

2
apparmor.d/profiles-s-z/sudo
View file

@ -77,8 +77,6 @@ profile sudo @{exec_path} {
owner @{HOME}/.sudo_as_admin_successful rw,
@{run}/systemd/userdb/ r,
@{run}/systemd/userdb/io.systemd.DynamicUser rw,
@{run}/resolvconf/resolv.conf r,
/dev/ r, # interactive login