felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refractor(abs): move common and app abstraction to their own abstractions subfolder.

Browse source 
As the number of abstraction is increasing, it is valuable to separate "base" abstractions to programs specific ones.
This commit is contained in:
Alexandre Pujol 2024-03-27 15:11:21 +00:00
parent 92f83d9e8d
commit b88b8b8c26
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
158 changed files with 226 additions and 198 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/profiles-g-l/gparted
View file

@ -60,7 +60,7 @@ profile gparted @{exec_path} {
profile udevadm {
include <abstractions/base>
include <abstractions/systemd-common>
include <abstractions/common/systemd>
@{bin}/udevadm mr,
@ -97,7 +97,7 @@ profile gparted @{exec_path} {
profile systemctl {
include <abstractions/base>
include <abstractions/systemctl>
include <abstractions/app/systemctl>
include if exists <local/gparted_systemctl>
}

4
apparmor.d/profiles-g-l/hw-probe
View file

@ -165,7 +165,7 @@ profile hw-probe @{exec_path} {
profile udevadm {
include <abstractions/base>
include <abstractions/systemd-common>
include <abstractions/common/systemd>
@{bin}/udevadm mr,
@ -222,7 +222,7 @@ profile hw-probe @{exec_path} {
profile systemctl {
include <abstractions/base>
include <abstractions/systemctl>
include <abstractions/app/systemctl>
include if exists <local/hw-probe_systemctl>
}

2
apparmor.d/profiles-g-l/initd-kexec
View file

@ -40,7 +40,7 @@ profile initd-kexec @{exec_path} {
profile systemctl {
include <abstractions/base>
include <abstractions/systemctl>
include <abstractions/app/systemctl>
capability sys_resource,

6
apparmor.d/profiles-g-l/inxi
View file

@ -127,7 +127,7 @@ profile inxi @{exec_path} {
profile systemd {
include <abstractions/base>
include <abstractions/systemd-common>
include <abstractions/common/systemd>
@{lib}/systemd/systemd mr,
@ -138,7 +138,7 @@ profile inxi @{exec_path} {
profile udevadm {
include <abstractions/base>
include <abstractions/systemd-common>
include <abstractions/common/systemd>
@{bin}/udevadm mr,
@ -164,7 +164,7 @@ profile inxi @{exec_path} {
profile systemctl {
include <abstractions/base>
include <abstractions/systemctl>
include <abstractions/app/systemctl>
include if exists <local/inxi_systemctl>
}

2
apparmor.d/profiles-g-l/lightdm-gtk-greeter
View file

@ -40,7 +40,7 @@ profile lightdm-gtk-greeter @{exec_path} {
profile systemd {
include <abstractions/base>
include <abstractions/systemd-common>
include <abstractions/common/systemd>
include <abstractions/nameservice-strict>
@{lib}/systemd/systemd mr,

2
apparmor.d/profiles-g-l/logrotate
View file

@ -86,7 +86,7 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
profile systemctl flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/systemctl>
include <abstractions/app/systemctl>
capability net_admin,
capability sys_ptrace,