feat(abs): add new shells abstraction.
This commit is contained in:
parent
58a4f1601a
commit
adb936e62f
10 changed files with 28 additions and 20 deletions
|
|
@ -18,9 +18,9 @@ include <tunables/global>
|
|||
# of files.
|
||||
profile default_user flags=(complain) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/shells>
|
||||
|
||||
deny capability sys_ptrace,
|
||||
|
||||
|
|
@ -38,9 +38,9 @@ profile default_user flags=(complain) {
|
|||
# anywhere, and execute from some places.
|
||||
profile confined_user flags=(complain) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/bash-strict>
|
||||
include <abstractions/consoles>
|
||||
include <abstractions/nameservice>
|
||||
include <abstractions/nameservice-strict>
|
||||
include <abstractions/shells>
|
||||
|
||||
deny capability sys_ptrace,
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue