felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve xorg start from xinit.

Browse source 
See: #105.
This commit is contained in:
Alexandre Pujol 2023-01-18 22:52:32 +00:00
parent 477993df16
commit a16d645dcb
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 56 additions and 66 deletions
Download patch file Download diff file Expand all files Collapse all files

21
apparmor.d/profiles-g-l/login
View file

@ -15,16 +15,18 @@ profile login @{exec_path} flags=(complain) {
include <abstractions/wutmp>
include <abstractions/dbus-strict>
capability audit_write,
capability chown,
capability dac_read_search,
capability fowner,
capability fsetid,
capability net_admin,
capability setgid,
capability setuid,
capability sys_resource,
capability audit_write,
capability dac_read_search,
# capability net_admin,
capability sys_tty_config,
# network netlink raw,
network netlink raw,
dbus send bus=system path=/org/freedesktop/login1
interface=org.freedesktop.login1.*
@ -34,19 +36,20 @@ profile login @{exec_path} flags=(complain) {
/{usr/,}bin/{,z,ba,da}sh rUx,
/etc/environment r,
/etc/motd r,
/etc/legal r,
/etc/default/locale r,
/etc/security/pam_env.conf r,
/etc/environment r,
/etc/legal r,
/etc/motd r,
/etc/security/group.conf r,
/etc/security/limits.conf r,
/etc/security/limits.d/{,*} r,
/etc/security/pam_env.conf r,
/etc/shells r,
/var/log/btmp{,.[0-9]*} r,
@{run}/faillock/root rwk,
@{run}/dbus/system_bus_socket rw,
@{run}/faillock/* rwk,
@{run}/motd.dynamic{,.new} rw,
@{run}/systemd/sessions/*.ref rw,