Profiles update.

This commit is contained in:
Alexandre Pujol 2021-06-06 14:55:17 +01:00
parent 44dc86cd36
commit 9ad8ec165d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 68 additions and 17 deletions

View file

@ -10,6 +10,7 @@ include <tunables/global>
profile arch-audit @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
capability dac_read_search,

View file

@ -15,20 +15,25 @@ profile paccache @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/cat rix,
/{usr/,}bin/gettext rix,
/{usr/,}bin/pacman-conf rPx,
/{usr/,}bin/pacman rPUx,
/{usr/,}bin/tput rix,
/{usr/,}bin/pacsort rix,
/{usr/,}bin/gawk rix,
/{usr/,}bin/bash rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/gawk rix,
/{usr/,}bin/gettext rix,
/{usr/,}bin/pacman rPUx,
/{usr/,}bin/pacman-conf rPx,
/{usr/,}bin/pacsort rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/stat rix,
/{usr/,}bin/tput rix,
/{usr/,}bin/xargs rix,
/usr/share/makepkg/util/*.sh r,
/usr/share/terminfo/x/xterm-256color r,
/var/cache/pacman/pkg/{,*} rw,
owner @{PROC}/@{pid}/fd/ r,
/dev/tty rw,
include if exists <local/paccache>