feat(profiles): use /etc read only variable: etc_ro

2023-02-04 23:34:29 +00:00 · 2023-02-04 23:34:29 +00:00 · bac87f9547
commit bac87f9547
parent 6e56cfccc9
19 changed files with 33 additions and 32 deletions
--- a/apparmor.d/profiles-a-f/check-support-status-hook
+++ b/apparmor.d/profiles-a-f/check-support-status-hook
@ -119,7 +119,7 @@ profile check-support-status-hook @{exec_path} {
    owner @{PROC}/@{pids}/loginuid r,
          @{PROC}/1/limits r,

-    /etc/security/limits.d/ r,
+    @{etc_ro}/security/limits.d/ r,

          /tmp/ r,
    owner /tmp/debian-security-support.postinst.*/output w,