felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use the @{pci} varibale when possible.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-08 17:46:05 +00:00
parent 013f1c5a83
commit bb947318a5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
83 changed files with 168 additions and 170 deletions
Download patch file Download diff file Expand all files Collapse all files

18
apparmor.d/groups/systemd/systemd-backlight
View file

@ -28,15 +28,15 @@ profile systemd-backlight @{exec_path} {
@{sys}/class/backlight/ r,
@{sys}/devices/pci[0-9]*/*:@{int}.@{int}/**/ r,
@{sys}/devices/pci[0-9]*/**/ r,
@{sys}/devices/pci[0-9]*/**/backlight/**/{max_brightness,actual_brightness} r,
@{sys}/devices/pci[0-9]*/**/backlight/**/{uevent,type} r,
@{sys}/devices/pci[0-9]*/**/backlight/**/brightness rw,
@{sys}/devices/pci[0-9]*/**/class r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/{max_brightness,actual_brightness} r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/{uevent,type} r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/**/brightness rw,
@{sys}/devices/pci[0-9]*/**/uevent r,
@{sys}/devices/@{pci}/ r,
@{sys}/devices/@{pci}/backlight/**/{max_brightness,actual_brightness} r,
@{sys}/devices/@{pci}/backlight/**/{uevent,type} r,
@{sys}/devices/@{pci}/backlight/**/brightness rw,
@{sys}/devices/@{pci}/class r,
@{sys}/devices/@{pci}/drm/card@{int}/**/{max_brightness,actual_brightness} r,
@{sys}/devices/@{pci}/drm/card@{int}/**/{uevent,type} r,
@{sys}/devices/@{pci}/drm/card@{int}/**/brightness rw,
@{sys}/devices/@{pci}/uevent r,
@{sys}/devices/platform/**/leds/*backlight*/brightness rw,
@{sys}/devices/platform/**/leds/*backlight*/max_brightness r,

2
apparmor.d/groups/systemd/systemd-networkd
View file

@ -63,7 +63,7 @@ profile systemd-networkd @{exec_path} flags=(attach_disconnected,complain) {
@{sys}/devices/@{pci}/rfkill@{int}/* r,
@{sys}/devices/**/net/** r,
@{sys}/devices/pci[0-9]*/**/ r,
@{sys}/devices/@{pci}/ r,
@{sys}/devices/virtual/dmi/id/{sys,board,bios}_vendor r,
@{sys}/devices/virtual/dmi/id/product_name r,
@{sys}/devices/virtual/dmi/id/product_version r,