felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-02-05 00:03:20 +00:00
parent 53d1b7a3fd
commit a402200dbe
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
11 changed files with 31 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/systemd/systemd-binfmt
View file

@ -21,12 +21,12 @@ profile systemd-binfmt @{exec_path} flags=(attach_disconnected) {
@{run}/binfmt.d/{,*.conf} r,
/usr/lib/binfmt.d/{,*.conf} r,
owner @{PROC}/@{pid}/stat r,
@{PROC}/1/environ r,
@{PROC}/cmdline r,
@{PROC}/sys/fs/binfmt_misc/status w,
@{PROC}/sys/fs/binfmt_misc/register w,
@{PROC}/sys/fs/binfmt_misc/status w,
@{PROC}/sys/kernel/osrelease r,
owner @{PROC}/@{pid}/stat r,
deny /apparmor/.null rw,

2
apparmor.d/groups/systemd/systemd-resolved
View file

@ -50,10 +50,10 @@ profile systemd-resolved @{exec_path} flags=(attach_disconnected) {
/etc/systemd/resolved.conf r,
/etc/systemd/resolved.conf.d/{,*} r,
owner @{run}/systemd/journal/socket w,
@{run}/systemd/netif/links/* r,
@{run}/systemd/notify rw,
@{run}/systemd/resolve/{,**} rw,
owner @{run}/systemd/journal/socket w,
@{PROC}/sys/kernel/hostname r,
@{PROC}/sys/net/ipv6/conf/all/disable_ipv6 r,