felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-10-04 21:11:13 +01:00
parent d0a8030af8
commit ac47e292ac
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
15 changed files with 44 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/systemd/bootctl
View file

@ -20,7 +20,9 @@ profile bootctl @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
/{boot,efi}/ r,
/{boot,efi}/EFI/{,**} r,

11
apparmor.d/groups/systemd/busctl
View file

@ -9,8 +9,19 @@ include <tunables/global>
@{exec_path} = /{usr/,}bin/busctl
profile busctl @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
ptrace (read),
@{exec_path} mr,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
@{PROC}/@{pids}/cgroup r,
@{PROC}/@{pids}/comm r,
@{PROC}/@{pids}/stat r,
include if exists <local/busctl>
}

2
apparmor.d/groups/systemd/coredumpctl
View file

@ -17,9 +17,9 @@ profile coredumpctl @{exec_path} flags=(complain) {
/{usr/,}bin/gdb rCx -> gdb,
/{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
owner /tmp/*.coredump w,
owner /tmp/core.* w,

2
apparmor.d/groups/systemd/journalctl
View file

@ -23,9 +23,9 @@ profile journalctl @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
/var/lib/dbus/machine-id r,
/etc/machine-id r,

2
apparmor.d/groups/systemd/localectl
View file

@ -13,9 +13,9 @@ profile localectl @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
/usr/share/kbd/keymaps/{,**} r,

6
apparmor.d/groups/systemd/networkctl
View file

@ -31,9 +31,9 @@ profile networkctl @{exec_path} flags=(attach_disconnected,complain) {
@{exec_path} mr,
/{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
/etc/udev/hwdb.bin r,
/var/lib/dbus/machine-id r,

6
apparmor.d/groups/systemd/systemd-cgls
View file

@ -14,9 +14,9 @@ profile systemd-cgls @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
@{sys}/fs/cgroup/{,**} r,

6
apparmor.d/groups/systemd/systemd-cgtop
View file

@ -12,9 +12,9 @@ profile systemd-cgtop @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
@{sys}/fs/cgroup/{,**} r,

2
apparmor.d/groups/systemd/systemd-mount
View file

@ -14,9 +14,9 @@ profile systemd-mount @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/pager rPx -> child-pager,
/{usr/,}bin/less rPx -> child-pager,
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/pager rPx -> child-pager,
@{sys}/bus/ r,
@{sys}/class/ r,