feat(profiles): remove rules promoted into the base abstraction.
This commit is contained in:
parent
116cb3059f
commit
9a46df81b9
28 changed files with 0 additions and 36 deletions
|
|
@ -133,7 +133,6 @@ profile k3s @{exec_path} {
|
|||
|
||||
@{sys}/devices/pci[0-9]*/**/net/*/{address,mtu,speed} r,
|
||||
@{sys}/devices/system/edac/mc/ r,
|
||||
@{sys}/devices/system/cpu/ r,
|
||||
@{sys}/devices/system/cpu/cpu[0-9]*/cache/{,**} r,
|
||||
@{sys}/devices/system/cpu/cpu[0-9]*/topology/{,**} r,
|
||||
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_max_freq r,
|
||||
|
|
|
|||
|
|
@ -189,10 +189,8 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
|
|||
@{sys}/devices/pci[0-9]*/**/remove w,
|
||||
@{sys}/devices/pci[0-9]*/**/sriov_totalvfs r,
|
||||
|
||||
@{sys}/devices/system/cpu/ r,
|
||||
@{sys}/devices/system/cpu/cpu[0-9]*/cache/{,**} r,
|
||||
@{sys}/devices/system/cpu/cpu[0-9]*/topology/{,**} r,
|
||||
@{sys}/devices/system/cpu/possible r,
|
||||
@{sys}/devices/system/cpu/present r,
|
||||
@{sys}/devices/system/cpu/present/ r,
|
||||
@{sys}/devices/system/node/ r,
|
||||
|
|
|
|||
|
|
@ -45,7 +45,6 @@ profile virt-aa-helper @{exec_path} {
|
|||
|
||||
@{PROC}/@{pid}/fd/ r,
|
||||
@{PROC}/@{pid}/net/psched r,
|
||||
@{PROC}/filesystems r,
|
||||
deny @{PROC}/@{pid}/mounts r,
|
||||
owner @{PROC}/@{pid}/status r,
|
||||
|
||||
|
|
|
|||
|
|
@ -32,7 +32,6 @@ profile virtlogd @{exec_path} flags=(attach_disconnected) {
|
|||
@{run}/systemd/inhibit/[0-9]*.ref rw,
|
||||
@{run}/virtlogd.pid rwk,
|
||||
|
||||
@{sys}/devices/system/cpu/possible r,
|
||||
@{sys}/devices/system/node/ r,
|
||||
@{sys}/devices/system/node/node[0-9]*/meminfo r,
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue