felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-03-27 21:42:13 +01:00
parent c7cf156de9
commit b793968690
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 43 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/pacman/mkinitcpio
View file

@ -21,12 +21,15 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
@{exec_path} rmix,
/{usr/,}{s,}bin/ldconfig rix,
/{usr/,}bin/{,ba}sh rix,
/{usr/,}bin/{m,g,}awk rix,
/{usr/,}bin/bsdtar rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/cp rix,
/{usr/,}bin/dd rix,
/{usr/,}bin/dirname rix,
/{usr/,}bin/fc-match rix,
/{usr/,}bin/find rix,
/{usr/,}bin/findmnt rPx,
/{usr/,}bin/fsck rix,
@ -35,12 +38,12 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/gzip rix,
/{usr/,}bin/hexdump rix,
/{usr/,}bin/install rix,
/{usr/,}{s,}bin/ldconfig rix,
/{usr/,}bin/ldd rix,
/{usr/,}bin/ln rix,
/{usr/,}bin/loadkeys rix,
/{usr/,}bin/mktemp rix,
/{usr/,}bin/mv rix,
/{usr/,}bin/od rix,
/{usr/,}bin/readlink rix,
/{usr/,}bin/realpath rix,
/{usr/,}bin/rm rix,
@ -52,6 +55,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/touch rix,
/{usr/,}bin/tput rix,
/{usr/,}bin/uname rix,
/{usr/,}bin/xargs rix,
/{usr/,}bin/xz rix,
/{usr/,}bin/zcat rix,
/{usr/,}bin/zstd rix,
@ -67,6 +71,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
/{usr/,}lib{,32,64}/ld-*.so* rix,
/etc/fstab r,
/etc/initcpio/{,**} r,
/etc/locale.conf r,
/etc/lvm/lvm.conf r,
/etc/mkinitcpio.conf r,

4
apparmor.d/groups/pacman/pacman-hook-mkinitcpio
View file

@ -27,11 +27,13 @@ profile pacman-hook-mkinitcpio @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/od rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/sort rix,
/{usr/,}bin/stat rix,
/usr/share/mkinitcpio/*.preset r,
/etc/mkinitcpio.d/{,**} r,
/etc/mkinitcpio.d/*.preset rw,
/etc/mkinitcpio.d/*.preset{,.pacsave} rw,
/ r,
/boot/vmlinuz-* rw,