refractor: move more profiles to groups.

This commit is contained in:
Alexandre Pujol 2025-02-15 16:09:52 +01:00
parent 33681e14f2
commit 8ba3dbd90f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
38 changed files with 3 additions and 2 deletions

View file

@ -0,0 +1,24 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/{mkntfs,mkfs.ntfs}
profile mkntfs @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>
capability sys_admin,
@{exec_path} mr,
owner @{PROC}/@{pids}/mounts r,
include if exists <local/mkntfs>
}
# vim:syntax=apparmor