felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2021-06-29 19:55:56 +01:00
parent d084023120
commit ab5958c511
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 29 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/systemd/coredumpctl
View file

@ -44,6 +44,7 @@ profile coredumpctl @{exec_path} flags=(complain) {
profile gdb {
include <abstractions/base>
include <abstractions/python>
include <abstractions/openssl>
ptrace (trace),
@ -62,7 +63,8 @@ profile coredumpctl @{exec_path} flags=(complain) {
/usr/share/glib-2.0/gdb/{,**} r,
/usr/share/gcc-[0-9]*/python/{,**} r,
/usr/share/gcc/** r,
/usr/share/terminfo/x/xterm-256color r,
owner /var/tmp/coredump-* rw,
# Silencer

7
apparmor.d/groups/systemd/systemd-coredump
View file

@ -15,12 +15,11 @@ profile systemd-coredump @{exec_path} flags=(attach_disconnected complain) {
include <abstractions/systemd-common>
capability dac_read_search,
capability net_admin,
capability setgid,
capability setpcap,
capability setuid,
capability sys_ptrace,
# Needed?
# deny capability net_admin,
@{exec_path} mr,
@ -31,9 +30,7 @@ profile systemd-coredump @{exec_path} flags=(attach_disconnected complain) {
/etc/systemd/coredump.conf r,
/var/lib/systemd/coredump/ r,
/var/lib/systemd/coredump/#[0-9]* rwl,
/var/lib/systemd/coredump/core.*.@{uid}.[0-9a-f]*.[0-9]*.[0-9]*.zst rwl,
/var/lib/systemd/coredump/core.*.@{uid}.[0-9a-f]*.[0-9]*.[0-9]* rwl,
/var/lib/systemd/coredump/** rwl,
owner @{PROC}/@{pid}/setgroups r,
@{PROC}/@{pids}/comm r,