felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update apparmor profiles

Browse source
This commit is contained in:
Mikhail Morfikov 2021-01-10 16:35:07 +01:00
parent 756e2071e1
commit 8e075d25fa
No known key found for this signature in database
GPG key ID: 32D9CB634796CCA1
603 changed files with 1280 additions and 723 deletions
Download patch file Download diff file Expand all files Collapse all files

58
apparmor.d/cron
View file

@ -1,7 +1,7 @@
# vim:syntax=apparmor
# ------------------------------------------------------------------
#
# Copyright (C) 2019-2020 Mikhail Morfikov
# Copyright (C) 2019-2021 Mikhail Morfikov
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
@ -43,7 +43,6 @@ profile cron @{exec_path} {
/{usr/,}lib/@{multiarch}/e2fsprogs/e2scrub_all_cron rPUx,
/{usr/,}sbin/e2scrub_all rPUx,
/etc/cron.daily/popularity-contest rPx,
/usr/local/bin/update-blacklist.sh rPUx,
/{usr/,}lib/sysstat/debian-sa1 rPUx,
# All stuff that is executed via the user crontab files
@ -83,43 +82,34 @@ profile cron @{exec_path} {
/{usr/,}bin/run-parts mr,
/etc/cron.hourly/ r,
/etc/cron.{hourly,daily,weekly,monthly}/ r,
/etc/cron.{hourly,daily,weekly,monthly}/apt-listbugs rPx,
/etc/cron.{hourly,daily,weekly,monthly}/apt-show-versions rPx,
/etc/cron.{hourly,daily,weekly,monthly}/bsdmainutils rPUx,
/etc/cron.{hourly,daily,weekly,monthly}/debtags rPx,
/etc/cron.{hourly,daily,weekly,monthly}/exim4-base rPx,
/etc/cron.{hourly,daily,weekly,monthly}/logrotate rPx,
/etc/cron.{hourly,daily,weekly,monthly}/mlocate rPx,
/etc/cron.{hourly,daily,weekly,monthly}/dlocate rPx,
/etc/cron.{hourly,daily,weekly,monthly}/passwd rPUx,
/etc/cron.{hourly,daily,weekly,monthly}/apt-compat rPx,
/etc/cron.{hourly,daily,weekly,monthly}/aptitude rPx,
/etc/cron.{hourly,daily,weekly,monthly}/debsums rPx,
/etc/cron.{hourly,daily,weekly,monthly}/dpkg rPUx,
/etc/cron.{hourly,daily,weekly,monthly}/man-db rPx,
/etc/cron.{hourly,daily,weekly,monthly}/popularity-contest rPx,
/etc/cron.{hourly,daily,weekly,monthly}/sysstat rPx,
/etc/cron.{hourly,daily,weekly,monthly}/spamassassin rPUx,
/etc/cron.{hourly,daily,weekly,monthly}/vrms rPUx,
/etc/cron.{hourly,daily,weekly,monthly}/apt-xapian-index rPx,
/etc/cron.{hourly,daily,weekly,monthly}/tor rPUx,
/etc/cron.daily/ r,
/etc/cron.daily/apt-listbugs rPx,
/etc/cron.daily/apt-show-versions rPx,
/etc/cron.daily/bsdmainutils rPUx,
/etc/cron.daily/debtags rPUx,
/etc/cron.daily/exim4-base rPUx,
/etc/cron.daily/logrotate rPx,
/etc/cron.daily/mlocate rPx,
/etc/cron.daily/dlocate rPx,
/etc/cron.daily/passwd rPUx,
/etc/cron.daily/apt-compat rPUx,
/etc/cron.daily/aptitude rPx,
/etc/cron.daily/debsums rPx,
/etc/cron.daily/dpkg rPUx,
/etc/cron.daily/man-db rPUx,
/etc/cron.daily/popularity-contest rPx,
/etc/cron.daily/sysstat rPx,
/etc/cron.daily/spamassassin rPUx,
#/etc/cron.daily/opera-browser rPUx,
#/etc/cron.daily/google-chrome{,-beta,-unstable} rPUx,
#/etc/cron.{hourly,daily,weekly,monthly}/opera-browser rPUx,
#/etc/cron.{hourly,daily,weekly,monthly}/google-chrome{,-beta,-unstable} rPUx,
#/opt/google/chrome{,-beta,-unstable}/cron/google-chrome{,-beta,-unstable} rPUx,
#/opt/brave.com/brave/cron/brave-browser{,-beta,-dev} rPUx,
#/opt/brave.com/brave{,-beta,-dev}/cron/brave-browser{,-beta,-dev} rPUx,
/etc/cron.monthly/ r,
/etc/cron.monthly/debsums rPx,
/etc/cron.monthly/vrms rPUx,
/etc/cron.weekly/ r,
/etc/cron.weekly/apt-xapian-index rPx,
/etc/cron.weekly/debsums rPx,
/etc/cron.weekly/man-db rPUx,
/etc/cron.weekly/tor rPUx,
# file_inherit
owner /tmp/#[0-9]*[0-9] rw,