felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'main' of github.com:roddhjav/apparmor.d

Browse source 
* 'main' of github.com:roddhjav/apparmor.d:
  fix(systemd-oomd): add `app.slice` and `session.slice` paths
  polkit-kde-authentication-agent update (#345)
  add multiple profiles (#341)
This commit is contained in:
Alexandre Pujol 2024-06-03 19:06:35 +01:00
commit 951bf6a840
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 104 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

50
apparmor.d/profiles-a-f/atool Normal file
View file

@ -0,0 +1,50 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/atool
profile atool @{exec_path} {
include <abstractions/base>
include <abstractions/perl>
include <abstractions/user-write-strict>
@{exec_path} mr,
@{bin}/7z rix,
@{bin}/arc rix,
@{bin}/arj rix,
@{bin}/bzip2 rix,
@{bin}/bzip2 rix,
@{bin}/bzip rix,
@{bin}/compress rix,
@{bin}/cpio rix,
@{bin}/gunzip rix,
@{bin}/gzip rix,
@{bin}/gzip rix,
@{bin}/jar rix,
@{bin}/lha rix,
@{bin}/lrunzip rix,
@{bin}/lrzcat rix,
@{bin}/lrzip rix,
@{bin}/lrz rix,
@{bin}/lrztar rix,
@{bin}/lrzuntar rix,
@{bin}/lzip rix,
@{bin}/lzma rix,
@{bin}/lzop rix,
@{bin}/lzop rix,
@{bin}/rar rix,
@{bin}/tar rix,
@{bin}/unace rix,
@{bin}/unrar rix,
@{bin}/unxz rix,
@{bin}/unzip rix,
@{bin}/xz rix,
@{bin}/zip rix,
include if exists <local/atool>
}

18
apparmor.d/profiles-a-f/exiftool Normal file
View file

@ -0,0 +1,18 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/vendor_perl/exiftool
profile exiftool @{exec_path} {
include <abstractions/base>
include <abstractions/perl>
include <abstractions/user-read-strict>
@{exec_path} mr,
include if exists <local/exiftool>
}