felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-13 20:09:52 +00:00
parent ecb7f2e79f
commit a1b86b56d2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
31 changed files with 75 additions and 131 deletions
Download patch file Download diff file Expand all files Collapse all files

23
apparmor.d/profiles-g-l/haveged
View file

@ -1,32 +1,31 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2009-2012 Steve Kostecke <steve@debian.org>;
# 2011-2014 Jérémy Bobbio <lunar@debian.org>;
# 2020 krathalan https://git.sr.ht/~krathalan/apparmor-profiles/
# Copyright (C) 2011-2014 Jérémy Bobbio <lunar@debian.org>;
# Copyright (C) 2020 krathalan https://git.sr.ht/~krathalan/apparmor-profiles/
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-3.0-only
# Version of program profiled: 1.9.14
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/haveged
profile haveged @{exec_path} {
include <abstractions/base>
# Required for ioctl RNDADDENTROPY
capability sys_admin,
owner @{PROC}/@{pid}/status r,
@{exec_path} mr,
@{PROC}/sys/kernel/osrelease r,
@{PROC}/sys/kernel/random/poolsize r,
@{PROC}/sys/kernel/random/write_wakeup_threshold w,
/dev/random w,
@{sys}/devices/system/cpu/cpu@{int}/cache/ r,
@{sys}/devices/system/cpu/cpu@{int}/cache/index*/{type,size,level} r,
@{PROC}/sys/kernel/osrelease r,
@{PROC}/sys/kernel/random/poolsize r,
@{PROC}/sys/kernel/random/write_wakeup_threshold w,
owner @{PROC}/@{pid}/status r,
/dev/random w,
include if exists <local/haveged>
}