felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refractor: add new polkit group.

Browse source
This commit is contained in:
Alexandre Pujol 2025-02-22 22:56:40 +01:00
parent 6ea379eecd
commit 898066c76c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 0 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

37
apparmor.d/profiles-m-r/pkexec
View file

@ -1,37 +0,0 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2022 Mikhail Morfikov
# Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pkexec
profile pkexec @{exec_path} {
include <abstractions/base>
include <abstractions/app/pkexec>
capability sys_nice,
signal send set=(term, kill) peer=polkit-agent-helper,
ptrace read,
@{exec_path} mr,
@{bin}/* PUx,
@{lib}/** PUx,
/opt/*/** PUx,
/usr/share/** PUx,
/etc/default/locale r,
@{PROC}/@{pid}/fdinfo/@{int} r,
@{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/fd/ r,
include if exists <local/pkexec>
}
# vim:syntax=apparmor

37
apparmor.d/profiles-m-r/pkttyagent
View file

@ -1,37 +0,0 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2022 Jeroen Rijken
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/pkttyagent
profile pkttyagent @{exec_path} {
include <abstractions/base>
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.PolicyKit1>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
capability sys_nice,
capability audit_write,
ptrace (read),
signal (send,receive),
@{exec_path} mr,
@{lib}/polkit-[0-9]/polkit-agent-helper-[0-9] rPx,
@{lib}/polkit-agent-helper-[0-9] rPx,
owner @{PROC}/@{pid}/fdinfo/@{int} r,
owner @{PROC}/@{pids}/stat r,
/dev/tty rw,
include if exists <local/pkttyagent>
}
# vim:syntax=apparmor