feat(profiles): remove rules promoted into the base abstraction.

This commit is contained in:
Alexandre Pujol 2022-11-28 18:05:29 +00:00
parent 116cb3059f
commit 9a46df81b9
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
28 changed files with 0 additions and 36 deletions

View file

@ -133,7 +133,6 @@ profile k3s @{exec_path} {
@{sys}/devices/pci[0-9]*/**/net/*/{address,mtu,speed} r,
@{sys}/devices/system/edac/mc/ r,
@{sys}/devices/system/cpu/ r,
@{sys}/devices/system/cpu/cpu[0-9]*/cache/{,**} r,
@{sys}/devices/system/cpu/cpu[0-9]*/topology/{,**} r,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_max_freq r,

View file

@ -189,10 +189,8 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/pci[0-9]*/**/remove w,
@{sys}/devices/pci[0-9]*/**/sriov_totalvfs r,
@{sys}/devices/system/cpu/ r,
@{sys}/devices/system/cpu/cpu[0-9]*/cache/{,**} r,
@{sys}/devices/system/cpu/cpu[0-9]*/topology/{,**} r,
@{sys}/devices/system/cpu/possible r,
@{sys}/devices/system/cpu/present r,
@{sys}/devices/system/cpu/present/ r,
@{sys}/devices/system/node/ r,

View file

@ -45,7 +45,6 @@ profile virt-aa-helper @{exec_path} {
@{PROC}/@{pid}/fd/ r,
@{PROC}/@{pid}/net/psched r,
@{PROC}/filesystems r,
deny @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/status r,

View file

@ -32,7 +32,6 @@ profile virtlogd @{exec_path} flags=(attach_disconnected) {
@{run}/systemd/inhibit/[0-9]*.ref rw,
@{run}/virtlogd.pid rwk,
@{sys}/devices/system/cpu/possible r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/meminfo r,