felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: update-alternatives is **not** installed in sbin.

Browse source
This commit is contained in:
Alexandre Pujol 2025-07-21 23:21:53 +02:00 • committed by Alex
parent f1a96db317
commit 8f7e373f62
6 changed files with 5 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-a-f/adequate
View file

@ -34,7 +34,7 @@ profile adequate @{exec_path} flags=(complain) {
# shared object file): ignored.
@{bin}/dpkg-query rpx,
#
@{sbin}/update-alternatives rPx,
@{bin}/update-alternatives rPx,
/var/lib/adequate/pending rwk,

2
apparmor.d/profiles-g-l/kernel
View file

@ -38,9 +38,9 @@ profile kernel @{exec_path} {
@{bin}/dpkg rPx -> child-dpkg,
@{bin}/kernel-install rPx,
@{bin}/systemd-detect-virt rPx,
@{bin}/update-alternatives rPx,
@{lib}/dkms/dkms_autoinstaller rPx,
@{sbin}/dkms rPx,
@{sbin}/update-alternatives rPx,
@{sbin}/update-grub rPx,
@{sbin}/update-initramfs rPx,

2
apparmor.d/profiles-m-r/initramfs-hooks
View file

@ -20,7 +20,7 @@ profile initramfs-hooks @{exec_path} {
@{bin}/ischroot Px,
@{bin}/ldd Cx -> ldd,
@{bin}/plymouth Px,
@{sbin}/update-alternatives Px,
@{bin}/update-alternatives Px,
@{lib}/dracut/dracut-install Px,
@{lib}/initramfs-tools/bin/busybox ix,
@{lib}/klibc/bin/fstype ix,

2
apparmor.d/profiles-m-r/initramfs-scripts
View file

@ -21,7 +21,7 @@ profile initramfs-scripts @{exec_path} {
@{bin}/ischroot Px,
@{bin}/ldd Cx -> ldd,
@{bin}/plymouth Px,
@{sbin}/update-alternatives Px,
@{bin}/update-alternatives Px,
@{lib}/dracut/dracut-install Px,
@{lib}/initramfs-tools/bin/busybox Px,
/usr/share/mdadm/mkconf Px,

2
apparmor.d/profiles-s-z/update-alternatives
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{sbin}/update-alternatives
@{exec_path} = @{bin}/update-alternatives
profile update-alternatives @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>

1
tests/sbin.list
View file

@ -766,7 +766,6 @@ unix_chkpwd
unix_update
unix2_chkpwd
uobjnew
update-alternatives
update-ca-certificates
update-catalog
update-cracklib