felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-08-21 20:16:29 +01:00
parent e6e0ef9067
commit 9d4956df0d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
23 changed files with 147 additions and 104 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/profiles-s-z/snapd
View file

@ -69,15 +69,15 @@ profile snapd @{exec_path} {
/{usr/,}bin/unsquashfs rix,
/{usr/,}bin/update-desktop-database rPx,
/{snap/snapd/[0-9]*/,}{usr/,}bin/fc-cache-* mr,
/{snap/snapd/[0-9]*/,}{usr/,}bin/snap rPx,
/{snap/snapd/[0-9]*/,}{usr/,}bin/xdelta3 rix, # TODO: rPx ?
/{snap/snapd/[0-9]*/,}{usr/,}lib/@{multiarch}/** mr,
/{snap/snapd/[0-9]*/,}{usr/,}lib/@{multiarch}/ld-*.so rix,
/{snap/snapd/[0-9]*/,}{usr/,}bin/snap rPx,
/{snap/snapd/[0-9]*/,}{usr/,}lib/snapd/snap-discard-ns rPx,
/{snap/snapd/[0-9]*/,}{usr/,}lib/snapd/snap-seccomp rPx,
/{snap/snapd/[0-9]*/,}{usr/,}lib/snapd/snap-update-ns rPx,
/{snap/snapd/[0-9]*/,}{usr/,}lib/snapd/snapd rix,
/{snap/snapd/[0-9]*/,}{usr/,}bin/fc-cache-* rPx -> fc-cache,
/{snap/snapd/[0-9]*/,}{usr/,}bin/xdelta3 rix, # TODO: rPx ?
/usr/share/bash-completion/completions/{,**} r,
/usr/share/dbus-1/{system,session}.d/{,snapd*} r,
@ -133,7 +133,6 @@ profile snapd @{exec_path} {
@{sys}/kernel/security/apparmor/features/ r,
@{sys}/kernel/security/apparmor/profiles r,
owner @{PROC}/@{pids}/mountinfo r,
@{PROC}/@{pids}/cgroup r,
@{PROC}/@{pids}/stat r,
@{PROC}/cgroups r,
@ -141,6 +140,7 @@ profile snapd @{exec_path} {
@{PROC}/sys/kernel/random/boot_id r,
@{PROC}/sys/kernel/seccomp/actions_avail r,
@{PROC}/version r,
owner @{PROC}/@{pids}/mountinfo r,
/dev/loop-control rw,