felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update secure-time-sync

Browse source
This commit is contained in:
npwc 2024-01-16 14:44:30 +00:00 • committed by GitHub
parent 0a69a3ec61
commit a447640f3c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/profiles-s-z/secure-time-sync
View file

@ -5,10 +5,11 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /usr/{,local/}bin/secure-time-sync
profile secure-time-sync @{exec_path} flags=(attach_disconnected) {
@{exec_path} = @{bin}/secure-time-sync
profile secure-time-sync @{bin}/secure-time-sync flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bash>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
capability sys_time,
@ -18,16 +19,6 @@ profile secure-time-sync @{exec_path} flags=(attach_disconnected) {
owner /dev/tty rw,
owner /etc/ca-certificates/** r,
owner /etc/ssl/** r,
owner /etc/host.conf r,
owner /etc/hosts r,
owner /etc/nsswitch.conf r,
owner /etc/passwd r,
owner /etc/resolv.conf r,
owner /etc/gai.conf r,
/usr/bin/bash ix,
/usr/bin/curl mrix,
/usr/bin/date mrix,