More consoles requirement after sshd introduction (#44)

* consoles requirement after sshd introduction * one more
2022-06-01 17:50:05 +00:00 · 2022-06-01 17:50:05 +00:00 · b4f7ed185c
commit b4f7ed185c
parent e2b7f6594c
9 changed files with 17 additions and 0 deletions
--- a/apparmor.d/profiles-s-z/usb-devices
+++ b/apparmor.d/profiles-s-z/usb-devices
@ -9,8 +9,12 @@ include <tunables/global>
@{exec_path} = /{usr/,}bin/usb-devices
 profile usb-devices @{exec_path} {
  include <abstractions/base>
+  include <abstractions/consoles>
  include <abstractions/devices-usb>

+       capability dac_read_search,
+  deny capability dac_override,
+
  @{exec_path} r,
  /{usr/,}bin/{,ba,da}sh rix,