feat(profiles): remove rules promoted into the base abstraction.
This commit is contained in:
parent
116cb3059f
commit
9a46df81b9
28 changed files with 0 additions and 36 deletions
|
|
@ -38,7 +38,6 @@ profile apparmor.systemd @{exec_path} flags=(complain) {
|
|||
@{PROC}/@{pids}/fd/ r,
|
||||
@{PROC}/@{pids}/maps r,
|
||||
@{PROC}/@{pids}/mounts r,
|
||||
@{PROC}/filesystems r,
|
||||
@{PROC}/mounts r,
|
||||
|
||||
/dev/tty rw,
|
||||
|
|
|
|||
|
|
@ -28,7 +28,6 @@ profile apparmor_parser @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
owner /tmp/cri-containerd.apparmor.d[0-9]* r,
|
||||
|
||||
@{sys}/devices/system/cpu/possible r,
|
||||
@{sys}/kernel/security/apparmor/{,**} r,
|
||||
owner @{sys}/kernel/security/apparmor/.{remove,replace,load,access} rw,
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue