felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use the @{pci} varibale when possible.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-08 17:46:05 +00:00
parent 013f1c5a83
commit bb947318a5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
83 changed files with 168 additions and 170 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-m-r/mdevctl
View file

@ -18,7 +18,7 @@ profile mdevctl @{exec_path} {
@{sys}/bus/mdev/devices/ r,
@{sys}/class/mdev_bus/ r,
@{sys}/devices/pci[0-9]*/**/mdev_supported_types/{,**} r,
@{sys}/devices/@{pci}/mdev_supported_types/{,**} r,
include if exists <local/mdevctl>
}

2
apparmor.d/profiles-m-r/monitorix
View file

@ -94,7 +94,7 @@ profile monitorix @{exec_path} {
@{PROC}/@{pids}/io r,
@{sys}/class/i2c-adapter/ r,
@{sys}/devices/pci[0-9]*/**/i2c-[0-9]*/name r,
@{sys}/devices/@{pci}/i2c-[0-9]*/name r,
@{sys}/class/hwmon/ r,
@{sys}/devices/**/thermal*/{,**} r,
@{sys}/devices/**/hwmon*/{,**} r,

10
apparmor.d/profiles-m-r/mono-sgen
View file

@ -43,11 +43,11 @@ profile mono-sgen @{exec_path} {
owner /tmp/CASESENSITIVETEST* rw,
owner /dev/shm/mono.* rw,
@{sys}/devices/pci[0-9]*/**/uevent r,
@{sys}/devices/pci[0-9]*/**/vendor r,
@{sys}/devices/pci[0-9]*/**/device r,
@{sys}/devices/pci[0-9]*/**/subsystem_vendor r,
@{sys}/devices/pci[0-9]*/**/subsystem_device r,
@{sys}/devices/@{pci}/uevent r,
@{sys}/devices/@{pci}/vendor r,
@{sys}/devices/@{pci}/device r,
@{sys}/devices/@{pci}/subsystem_vendor r,
@{sys}/devices/@{pci}/subsystem_device r,
owner @{PROC}/@{pid}/fd/ r,

4
apparmor.d/profiles-m-r/nvtop
View file

@ -37,8 +37,8 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {
@{sys}/bus/ r,
@{sys}/class/ r,
@{sys}/class/drm/ r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/gt_cur_freq_mhz r,
@{sys}/devices/pci[0-9]*/**/enable r,
@{sys}/devices/@{pci}/drm/card@{int}/gt_cur_freq_mhz r,
@{sys}/devices/@{pci}/enable r,
@{sys}/devices/system/node/node@{int}/cpumap r,
@{PROC}/ r,

8
apparmor.d/profiles-m-r/obexautofs
View file

@ -28,10 +28,10 @@ profile obexautofs @{exec_path} {
@{sys}/bus/ r,
@{sys}/class/ r,
@{sys}/bus/usb/devices/ r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/bConfigurationValue r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/**/bConfigurationValue r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/{uevent,busnum,devnum,speed,descriptors} r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/**/{uevent,busnum,devnum,speed,descriptors} r,
@{sys}/devices/@{pci}/usb@{int}/bConfigurationValue r,
@{sys}/devices/@{pci}/usb@{int}/**/bConfigurationValue r,
@{sys}/devices/@{pci}/usb@{int}/{uevent,busnum,devnum,speed,descriptors} r,
@{sys}/devices/@{pci}/usb@{int}/**/{uevent,busnum,devnum,speed,descriptors} r,
@{run}/udev/data/+usb:* r,
@{run}/udev/data/c18[0,8,9]:[0-9]* r, # USB devices & USB serial converters

2
apparmor.d/profiles-m-r/os-prober
View file

@ -64,7 +64,7 @@ profile os-prober @{exec_path} flags=(attach_disconnected) {
owner /tmp/os-prober.*/{,**} rw,
@{sys}/block/ r,
@{sys}/devices/pci[0-9]*/**/block/*/ r,
@{sys}/devices/@{pci}/block/*/ r,
@{sys}/devices/virtual/block/*/ r,
@{PROC}/swaps r,

2
apparmor.d/profiles-m-r/picom
View file

@ -27,7 +27,7 @@ profile picom @{exec_path} {
owner @{HOME}/.Xauthority r,
@{sys}/devices/pci[0-9]*/**/{uevent,vendor,device,subsystem_vendor,subsystem_device} r,
@{sys}/devices/@{pci}/{uevent,vendor,device,subsystem_vendor,subsystem_device} r,
owner @{PROC}/@{pid}/fd/ r,

2
apparmor.d/profiles-m-r/rfkill
View file

@ -14,7 +14,7 @@ profile rfkill @{exec_path} {
/dev/rfkill rw,
@{sys}/devices/pci[0-9]*/**/rfkill[0-9]/{name,type} r,
@{sys}/devices/@{pci}/rfkill[0-9]/{name,type} r,
@{sys}/devices/platform/**/rfkill/rfkill[0-9]/{name,type} r,
include if exists <local/rfkill>