feat(profile): general update.

Also include some preparation for the systemd profile.
2023-11-19 11:08:35 +00:00 · 2023-11-19 11:08:35 +00:00 · b79a1fcd31
commit b79a1fcd31
parent 3197f52a97
31 changed files with 86 additions and 48 deletions
--- a/apparmor.d/profiles-s-z/sudo
+++ b/apparmor.d/profiles-s-z/sudo
@ -94,7 +94,7 @@ profile sudo @{exec_path} {
  @{PROC}/sys/kernel/seccomp/actions_avail r,

        /dev/ r,    # interactive login
-        /dev/ptmx rw,
+        /dev/ptmx rwk,
  owner /dev/tty@{int} rw,

  deny @{user_share_dirs}/gvfs-metadata/* r,