felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-18 22:28:30 +01:00
parent cc3b76d7a4
commit 9c08b36182
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 20 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/virt/libvirtd
View file

@ -105,6 +105,7 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
@{bin}/dmidecode rPx,
@{bin}/dnsmasq rPx,
@{bin}/kmod rPx,
@{bin}/lvm rPUx,
@{bin}/mdevctl rPx,
@{bin}/swtpm rPx,
@ -192,10 +193,13 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/n[0-9]* r,
@{sys}/bus/[a-z]*/devices/ r,
@{sys}/bus/pci/drivers_probe w,
@{sys}/bus/pci/drivers/*/unbind w,
@{sys}/class/[a-z]*/ r,
@{sys}/devices/**/uevent r,
@{sys}/devices/pci[0-9]*/**/{class,revision,subsystem_vendor,subsystem_device} r,
@{sys}/devices/pci[0-9]*/**/{config,numa_node,device,vendor} r,
@{sys}/devices/pci[0-9]*/**/driver_override w,
@{sys}/devices/pci[0-9]*/**/mdev_supported_types/{,**} r,
@{sys}/devices/pci[0-9]*/**/mdev_supported_types/*/create w,
@{sys}/devices/pci[0-9]*/**/net/*/{,**} r,