felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add support for MD RAID devices to the disk-read/write abstractions (#796)

Browse source
This commit is contained in:
doublez13 2025-07-31 09:22:28 -06:00 • committed by GitHub
parent fc421183a0
commit 9e4db4373e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/abstractions/disks-read
View file

@ -81,6 +81,11 @@
# CD-ROM
/dev/sr@{int} rk,
# MD RAID devices
/dev/md@{int} rk,
@{sys}/devices/virtual/block/md@{int}/ r,
@{sys}/devices/virtual/block/md@{int}/** r,
# Lookup block device by major:minor numbers
# See: https://apparmor.pujol.io/development/internal/#udev-rules
@ -91,6 +96,7 @@
@{run}/udev/data/b2:@{int} r, # for /dev/fd*
@{run}/udev/data/b7:@{int} r, # for /dev/loop*
@{run}/udev/data/b8:@{int} r, # for /dev/sd*
@{run}/udev/data/b9:@{int} r, # for /dev/md*
@{run}/udev/data/b11:@{int} r, # for /dev/sr*
@{run}/udev/data/b43:@{int} r, # for /dev/nbd*
@{run}/udev/data/b179:@{int} r, # for /dev/mmcblk*

3
apparmor.d/abstractions/disks-write
View file

@ -41,6 +41,9 @@
# CD-ROM
/dev/sr@{int} w,
# MD RAID devices
/dev/md@{int} w,
include if exists <abstractions/disks-write.d>
# vim:syntax=apparmor