diff --git a/apparmor.d/abstractions/systemctl b/apparmor.d/abstractions/systemctl new file mode 100644 index 000000000..2fb161d79 --- /dev/null +++ b/apparmor.d/abstractions/systemctl @@ -0,0 +1,18 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2024 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + + include + + ptrace (read) peer=@{systemd}, + + unix (bind) type=stream addr=@@{hex}/bus/systemctl/, + + @{bin}/systemctl mr, + + owner @{run}/systemd/private rw, + + @{PROC}/cmdline r, + @{PROC}/sys/kernel/osrelease r, + + include if exists