felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use the @{pci} varibale when possible.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-08 17:46:05 +00:00
parent 013f1c5a83
commit bb947318a5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
83 changed files with 168 additions and 170 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/network/NetworkManager
View file

@ -131,8 +131,8 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/**/uevent r,
@{sys}/devices/virtual/net/{,**} r,
@{sys}/devices/pci[0-9]*/**/net/*/{,**} r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/**/net/{,**} r,
@{sys}/devices/@{pci}/net/*/{,**} r,
@{sys}/devices/@{pci}/usb@{int}/**/net/{,**} r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/fd/ r,

2
apparmor.d/groups/network/dhcpcd
View file

@ -56,7 +56,7 @@ profile dhcpcd @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/n@{int} r,
@{sys}/devices/pci[0-9]*/**/uevent r,
@{sys}/devices/@{pci}/uevent r,
@{sys}/devices/virtual/dmi/id/product_uuid r,
@{sys}/devices/virtual/net/**/{tun_flags,uevent} r,

2
apparmor.d/groups/network/mullvad-gui
View file

@ -57,7 +57,7 @@ profile mullvad-gui @{exec_path} flags=(attach_disconnected) {
@{run}/systemd/inhibit/*.ref rw,
@{sys}/bus/pci/devices/ r,
@{sys}/devices/pci[0-9]*/**/{vendor,device,class,config,resource,irq} r,
@{sys}/devices/@{pci}/{vendor,device,class,config,resource,irq} r,
@{sys}/devices/system/cpu/** r,
@{sys}/devices/virtual/tty/tty[0-9]*/active r,

2
apparmor.d/groups/network/nmcli
View file

@ -24,7 +24,7 @@ profile nmcli @{exec_path} {
@{run}/udev/data/n@{int} r,
@{sys}/devices/virtual/net/{,**} r,
@{sys}/devices/pci[0-9]*/**/net/*/{,**} r,
@{sys}/devices/@{pci}/net/*/{,**} r,
profile pager {
include <abstractions/base>