felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): more use @{etc_ro} when we know it is needed.

Browse source
This commit is contained in:
Alexandre Pujol 2025-01-25 22:31:29 +01:00
parent 4e73f7209f
commit 8806030a0a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
30 changed files with 49 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-a-f/agetty
View file

@ -24,15 +24,14 @@ profile agetty @{exec_path} {
@{bin}/login rPx,
@{etc_ro}/login.defs r,
@{etc_ro}/login.defs.d/{,*} r,
@{etc_rw}/issue r,
/{,usr/}lib/os-release r,
/{etc,run,lib,usr/lib}/issue r,
/{etc,run,lib,usr/lib}/issue.d/{,*} r,
/etc/inittab r,
/etc/login.defs r,
/etc/login.defs.d/{,*} r,
/etc/os-release r,
/usr/etc/login.defs r,
@{run}/credentials/getty@tty@{int}.service/ r,
@{run}/credentials/serial-getty@ttyS@{int}.service/ r,

2
apparmor.d/profiles-a-f/chage
View file

@ -20,7 +20,7 @@ profile chage @{exec_path} {
@{exec_path} mr,
/etc/login.defs r,
@{etc_ro}/login.defs r,
/etc/{passwd,shadow} rw,
/etc/{passwd,shadow}.@{pid} w,

3
apparmor.d/profiles-a-f/chpasswd
View file

@ -18,8 +18,9 @@ profile chpasswd @{exec_path} {
@{exec_path} mr,
@{etc_ro}/login.defs r,
/etc/.pwd.lock wk,
/etc/login.defs r,
/etc/passwd rw,
/etc/passwd.@{int} w,
/etc/passwd.lock l -> /etc/passwd.@{int},

3
apparmor.d/profiles-a-f/firecfg
View file

@ -21,7 +21,8 @@ profile firecfg @{exec_path} flags=(attach_disconnected) {
@{sh_path} rix,
@{bin}/apparmor_parser rPx,
/etc/login.defs r,
@{etc_ro}/login.defs r,
/etc/firejail/firejail.users r,
/etc/firejail/firecfg.config r,