feat(profiles): improve opensuse integration.

See: #208
2023-09-05 16:53:50 +01:00 · 2023-09-05 16:53:50 +01:00 · 9a614a3502
commit 9a614a3502
parent 155ef6bef1
7 changed files with 33 additions and 23 deletions
--- a/apparmor.d/groups/gpg/gpg
+++ b/apparmor.d/groups/gpg/gpg
@ -7,7 +7,7 @@ abi <abi/3.0>,

 include <tunables/global>

-@{exec_path} = @{bin}/gpg
+@{exec_path} = @{bin}/gpg{,2}
 profile gpg @{exec_path} {
  include <abstractions/base>
  include <abstractions/consoles>
--- a/apparmor.d/groups/gpg/gpgsm
+++ b/apparmor.d/groups/gpg/gpgsm
@ -16,6 +16,8 @@ profile gpgsm @{exec_path} {

  @{exec_path} mr,

+  @{bin}/dirmngr rPx,
+
  /usr/share/gnupg/* r,

  /etc/gcrypt/hwf.deny r,