felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feta(profile): remove the now duplicated @{bin}/perl r.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-18 23:10:38 +01:00
parent f6a9a1859a
commit bd9ab55bf0
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
35 changed files with 7 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/apt/apt
View file

@ -200,7 +200,6 @@ profile apt @{exec_path} flags=(attach_disconnected) {
include <abstractions/perl>
@{bin}/dpkg-source mr,
@{bin}/perl r,
@{bin}/bunzip2 rix,
@{bin}/chmod rix,

1
apparmor.d/groups/apt/apt-file
View file

@ -14,7 +14,6 @@ profile apt-file @{exec_path} {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
@{bin}/fgrep rix,
@{bin}/{,e}grep rix,

3
apparmor.d/groups/apt/apt-show-versions
View file

@ -10,12 +10,11 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-show-versions
profile apt-show-versions @{exec_path} {
include <abstractions/base>
include <abstractions/common/apt>
include <abstractions/consoles>
include <abstractions/perl>
include <abstractions/common/apt>
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/dpkg rPx -> child-dpkg,

1
apparmor.d/groups/apt/aptitude-changelog-parser
View file

@ -13,7 +13,6 @@ profile aptitude-changelog-parser @{exec_path} {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/etc/dpkg/origins/debian r,

1
apparmor.d/groups/apt/debconf-show
View file

@ -14,7 +14,6 @@ profile debconf-show @{exec_path} {
include <abstractions/nameservice-strict>
@{exec_path} r,
@{bin}/perl r,
@{bin}/locale rix,

2
apparmor.d/groups/apt/debsign
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/debsign
profile debsign @{exec_path} {
include <abstractions/base>
include <abstractions/perl>
@{exec_path} r,
@ -27,7 +28,6 @@ profile debsign @{exec_path} {
@{bin}/md5sum rix,
@{bin}/mktemp rix,
@{bin}/mv rix,
@{bin}/perl rix,
@{bin}/rm rix,
@{bin}/sed rix,
@{bin}/sha{1,256,512}sum rix,

1
apparmor.d/groups/apt/dpkg-buildflags
View file

@ -13,7 +13,6 @@ profile dpkg-buildflags @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/etc/dpkg/origins/debian r,

1
apparmor.d/groups/apt/dpkg-checkbuilddeps
View file

@ -13,7 +13,6 @@ profile dpkg-checkbuilddeps @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/etc/dpkg/origins/debian r,

1
apparmor.d/groups/apt/dpkg-genbuildinfo
View file

@ -17,7 +17,6 @@ profile dpkg-genbuildinfo @{exec_path} {
@{exec_path} r,
@{bin}/perl r,
/usr/local/bin/ r,
/usr/local/etc/ r,
/usr/local/include/ r,

1
apparmor.d/groups/apt/dpkg-genchanges
View file

@ -14,7 +14,6 @@ profile dpkg-genchanges @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/etc/dpkg/origins/debian r,

1
apparmor.d/groups/apt/dpkg-preconfigure
View file

@ -17,7 +17,6 @@ profile dpkg-preconfigure @{exec_path} {
#capability sys_tty_config,
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/{,e}grep rix,

2
apparmor.d/groups/freedesktop/xdg-screensaver
View file

@ -12,6 +12,7 @@ profile xdg-screensaver @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/freedesktop.org>
include <abstractions/perl>
@{exec_path} r,
@ -27,7 +28,6 @@ profile xdg-screensaver @{exec_path} flags=(complain) {
@{bin}/lockfile ix,
@{bin}/mktemp ix,
@{bin}/mv ix,
@{bin}/perl ix,
@{bin}/readlink ix,
@{bin}/realpath ix,
@{bin}/rm ix,

2
apparmor.d/groups/pacman/pacman
View file

@ -12,6 +12,7 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
include <abstractions/consoles>
include <abstractions/disks-read>
include <abstractions/nameservice-strict>
include <abstractions/perl>
include <abstractions/ssl_certs>
capability audit_write,
@ -83,7 +84,6 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
@{bin}/needrestart rPx,
@{bin}/pacdiff rPx,
@{bin}/pacman-key rPx,
@{bin}/perl rix,
@{bin}/pkgfile rPUx,
@{bin}/pkill rix,
@{bin}/rsync rix,

6
apparmor.d/groups/pacman/pacman-hook-perl
View file

@ -9,20 +9,18 @@ include <tunables/global>
@{exec_path} = /usr/share/libalpm/scripts/detect-old-perl-modules.sh
profile pacman-hook-perl @{exec_path} {
include <abstractions/base>
include <abstractions/perl>
capability dac_read_search,
capability mknod,
@{exec_path} mr,
@{bin}/perl rix,
@{bin}/bash rix,
@{sh_path} rix,
@{bin}/find rix,
@{bin}/pacman rPx,
@{bin}/sed rix,
@{lib}/perl@{int}/{,**} r,
/dev/tty rw,
/dev/tty@{int} rw,
owner /dev/pts/@{int} rw,

2
apparmor.d/groups/systemd/systemd-udevd
View file

@ -13,6 +13,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/common/systemd>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/perl>
capability chown,
capability dac_override,
@ -53,7 +54,6 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
@{bin}/multipath rPx,
@{bin}/nfsrahead rix,
@{bin}/nvidia-modprobe rPx -> child-modprobe-nvidia,
@{bin}/perl rix,
@{bin}/setfacl rix,
@{bin}/sg_inq rix,
@{bin}/snap rPx,