felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): initial dbus integration (no dbus rule yet).

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-03 20:38:23 +01:00
parent aa606bbdc4
commit a6a72cd5c3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
46 changed files with 64 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/systemd/child-systemctl
View file

@ -16,6 +16,7 @@ include <tunables/global>
profile child-systemctl flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/dbus-strict>
include <abstractions/wutmp>
capability net_admin,

1
apparmor.d/groups/systemd/networkctl
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = /{usr/,}bin/networkctl
profile networkctl @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/dbus-strict>
capability net_admin,

1
apparmor.d/groups/systemd/systemd-hostnamed
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = /{usr/,}lib/systemd/systemd-hostnamed
profile systemd-hostnamed @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/systemd-common>
# To set a hostname

3
apparmor.d/groups/systemd/systemd-logind
View file

@ -10,8 +10,9 @@ include <tunables/global>
profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/disks-write>
include <abstractions/devices-usb>
include <abstractions/disks-write>
include <abstractions/nameservice-strict>
include <abstractions/systemd-common>
capability chown,

1
apparmor.d/groups/systemd/systemd-user-runtime-dir
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = /{usr/,}lib/systemd/systemd-user-runtime-dir
profile systemd-user-runtime-dir @{exec_path} {
include <abstractions/base>
include <abstractions/dbus-strict>
include <abstractions/nameservice-strict>
include <abstractions/systemd-common>