felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): simplify needrestart & fix pam-auth-update.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-25 18:24:34 +02:00
parent ca5b4c99ba
commit 931c207089
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 2 additions and 19 deletions
Download patch file Download diff file Expand all files Collapse all files

19
apparmor.d/profiles-m-r/needrestart
View file

@ -9,11 +9,8 @@ include <tunables/global>
@{exec_path} = @{sbin}/needrestart @{exec_path} = @{sbin}/needrestart
profile needrestart @{exec_path} flags=(attach_disconnected) { profile needrestart @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/common/debconf>
include <abstractions/nameservice-strict>
include <abstractions/perl>
include <abstractions/python> include <abstractions/python>
include <abstractions/wutmp>
capability checkpoint_restore, capability checkpoint_restore,
capability dac_read_search, capability dac_read_search,
@ -27,18 +24,13 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
@{sh_path} rix, @{sh_path} rix,
@{bin}/dpkg-query rpx, @{bin}/dpkg-query rpx,
@{bin}/fail2ban-server rPx, @{bin}/fail2ban-server rPx,
@{bin}/sed rix,
@{bin}/stty rix,
@{bin}/systemctl rCx -> systemctl, @{bin}/systemctl rCx -> systemctl,
@{bin}/systemd-detect-virt rPx, @{bin}/systemd-detect-virt rPx,
@{bin}/udevadm rCx -> udevadm, @{bin}/udevadm rCx -> udevadm,
@{bin}/who rix,
@{lib}/needrestart/* rPx, @{lib}/needrestart/* rPx,
@{python_path} rix, @{python_path} rix,
@{sbin}/unix_chkpwd rPx, @{sbin}/unix_chkpwd rPx,
/usr/share/debconf/frontend rCx -> debconf,
/etc/needrestart/hook.d/* rPx, /etc/needrestart/hook.d/* rPx,
/etc/needrestart/notify.d/* rPx, /etc/needrestart/notify.d/* rPx,
/etc/needrestart/restart.d/* rPx, /etc/needrestart/restart.d/* rPx,
@ -96,15 +88,6 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
include if exists <local/needrestart_udevadm> include if exists <local/needrestart_udevadm>
} }
profile debconf {
include <abstractions/base>
include <abstractions/common/debconf>
@{sbin}/needrestart Px,
include if exists <local/needrestart_debconf>
}
include if exists <local/needrestart> include if exists <local/needrestart>
} }

2
apparmor.d/profiles-m-r/pam-auth-update
View file

@ -12,7 +12,7 @@ profile pam-auth-update @{exec_path} flags=(complain) {
include <abstractions/base> include <abstractions/base>
include <abstractions/common/debconf> include <abstractions/common/debconf>
@{exec_path} mr, @{exec_path} mrix,
@{bin}/md5sum ix, @{bin}/md5sum ix,
@{bin}/cp ix, @{bin}/cp ix,