felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feta(profile): remove the now duplicated @{bin}/perl r.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-18 23:10:38 +01:00
parent f6a9a1859a
commit bd9ab55bf0
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
35 changed files with 7 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/apt/apt
View file

@ -200,7 +200,6 @@ profile apt @{exec_path} flags=(attach_disconnected) {
include <abstractions/perl>
@{bin}/dpkg-source mr,
@{bin}/perl r,
@{bin}/bunzip2 rix,
@{bin}/chmod rix,

1
apparmor.d/groups/apt/apt-file
View file

@ -14,7 +14,6 @@ profile apt-file @{exec_path} {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
@{bin}/fgrep rix,
@{bin}/{,e}grep rix,

3
apparmor.d/groups/apt/apt-show-versions
View file

@ -10,12 +10,11 @@ include <tunables/global>
@{exec_path} = @{bin}/apt-show-versions
profile apt-show-versions @{exec_path} {
include <abstractions/base>
include <abstractions/common/apt>
include <abstractions/consoles>
include <abstractions/perl>
include <abstractions/common/apt>
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/dpkg rPx -> child-dpkg,

1
apparmor.d/groups/apt/aptitude-changelog-parser
View file

@ -13,7 +13,6 @@ profile aptitude-changelog-parser @{exec_path} {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/etc/dpkg/origins/debian r,

1
apparmor.d/groups/apt/debconf-show
View file

@ -14,7 +14,6 @@ profile debconf-show @{exec_path} {
include <abstractions/nameservice-strict>
@{exec_path} r,
@{bin}/perl r,
@{bin}/locale rix,

2
apparmor.d/groups/apt/debsign
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/debsign
profile debsign @{exec_path} {
include <abstractions/base>
include <abstractions/perl>
@{exec_path} r,
@ -27,7 +28,6 @@ profile debsign @{exec_path} {
@{bin}/md5sum rix,
@{bin}/mktemp rix,
@{bin}/mv rix,
@{bin}/perl rix,
@{bin}/rm rix,
@{bin}/sed rix,
@{bin}/sha{1,256,512}sum rix,

1
apparmor.d/groups/apt/dpkg-buildflags
View file

@ -13,7 +13,6 @@ profile dpkg-buildflags @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/etc/dpkg/origins/debian r,

1
apparmor.d/groups/apt/dpkg-checkbuilddeps
View file

@ -13,7 +13,6 @@ profile dpkg-checkbuilddeps @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/etc/dpkg/origins/debian r,

1
apparmor.d/groups/apt/dpkg-genbuildinfo
View file

@ -17,7 +17,6 @@ profile dpkg-genbuildinfo @{exec_path} {
@{exec_path} r,
@{bin}/perl r,
/usr/local/bin/ r,
/usr/local/etc/ r,
/usr/local/include/ r,

1
apparmor.d/groups/apt/dpkg-genchanges
View file

@ -14,7 +14,6 @@ profile dpkg-genchanges @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/etc/dpkg/origins/debian r,

1
apparmor.d/groups/apt/dpkg-preconfigure
View file

@ -17,7 +17,6 @@ profile dpkg-preconfigure @{exec_path} {
#capability sys_tty_config,
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/{,e}grep rix,

2
apparmor.d/groups/freedesktop/xdg-screensaver
View file

@ -12,6 +12,7 @@ profile xdg-screensaver @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/freedesktop.org>
include <abstractions/perl>
@{exec_path} r,
@ -27,7 +28,6 @@ profile xdg-screensaver @{exec_path} flags=(complain) {
@{bin}/lockfile ix,
@{bin}/mktemp ix,
@{bin}/mv ix,
@{bin}/perl ix,
@{bin}/readlink ix,
@{bin}/realpath ix,
@{bin}/rm ix,

2
apparmor.d/groups/pacman/pacman
View file

@ -12,6 +12,7 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
include <abstractions/consoles>
include <abstractions/disks-read>
include <abstractions/nameservice-strict>
include <abstractions/perl>
include <abstractions/ssl_certs>
capability audit_write,
@ -83,7 +84,6 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
@{bin}/needrestart rPx,
@{bin}/pacdiff rPx,
@{bin}/pacman-key rPx,
@{bin}/perl rix,
@{bin}/pkgfile rPUx,
@{bin}/pkill rix,
@{bin}/rsync rix,

6
apparmor.d/groups/pacman/pacman-hook-perl
View file

@ -9,20 +9,18 @@ include <tunables/global>
@{exec_path} = /usr/share/libalpm/scripts/detect-old-perl-modules.sh
profile pacman-hook-perl @{exec_path} {
include <abstractions/base>
include <abstractions/perl>
capability dac_read_search,
capability mknod,
@{exec_path} mr,
@{bin}/perl rix,
@{bin}/bash rix,
@{sh_path} rix,
@{bin}/find rix,
@{bin}/pacman rPx,
@{bin}/sed rix,
@{lib}/perl@{int}/{,**} r,
/dev/tty rw,
/dev/tty@{int} rw,
owner /dev/pts/@{int} rw,

2
apparmor.d/groups/systemd/systemd-udevd
View file

@ -13,6 +13,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/common/systemd>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/perl>
capability chown,
capability dac_override,
@ -53,7 +54,6 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected,complain) {
@{bin}/multipath rPx,
@{bin}/nfsrahead rix,
@{bin}/nvidia-modprobe rPx -> child-modprobe-nvidia,
@{bin}/perl rix,
@{bin}/setfacl rix,
@{bin}/sg_inq rix,
@{bin}/snap rPx,

1
apparmor.d/profiles-a-f/adduser
View file

@ -24,7 +24,6 @@ profile adduser @{exec_path} {
capability sys_admin, # For logger
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/find rix,

2
apparmor.d/profiles-a-f/adequate
View file

@ -17,7 +17,6 @@ profile adequate @{exec_path} flags=(complain) {
#capability sys_tty_config,
@{exec_path} r,
@{bin}/perl r,
@{bin}/ldconfig rix,
@ -74,7 +73,6 @@ profile adequate @{exec_path} flags=(complain) {
include <abstractions/nameservice-strict>
/usr/share/debconf/frontend r,
@{bin}/perl r,
@{bin}/adequate rPx,

2
apparmor.d/profiles-a-f/aspell-autobuildhash
View file

@ -14,7 +14,6 @@ profile aspell-autobuildhash @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/basename rix,
@ -47,7 +46,6 @@ profile aspell-autobuildhash @{exec_path} flags=(complain) {
include <abstractions/nameservice-strict>
/usr/share/debconf/frontend r,
@{bin}/perl r,
@{bin}/aspell-autobuildhash rPx,

1
apparmor.d/profiles-a-f/check-support-status
View file

@ -70,7 +70,6 @@ profile check-support-status @{exec_path} {
include <abstractions/perl>
@{bin}/debconf-escape r,
@{bin}/perl r,
owner @{tmp}/debian-security-support.postinst.*/output r,

2
apparmor.d/profiles-a-f/check-support-status-hook
View file

@ -53,7 +53,6 @@ profile check-support-status-hook @{exec_path} {
include <abstractions/perl>
@{bin}/debconf-escape r,
@{bin}/perl r,
/tmp/ r,
owner @{tmp}/debian-security-support.postinst.*/output r,
@ -68,7 +67,6 @@ profile check-support-status-hook @{exec_path} {
include <abstractions/nameservice-strict>
/usr/share/debconf/frontend r,
@{bin}/perl r,
/usr/share/debian-security-support/ r,
/usr/share/debian-security-support/check-support-status.hook rPx,

1
apparmor.d/profiles-a-f/ddclient
View file

@ -15,7 +15,6 @@ profile ddclient @{exec_path} {
include <abstractions/ssl_certs>
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/logger rix,

1
apparmor.d/profiles-a-f/deluser
View file

@ -18,7 +18,6 @@ profile deluser @{exec_path} {
capability dac_override,
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/crontab rPx,

1
apparmor.d/profiles-a-f/exo-compose-mail
View file

@ -13,7 +13,6 @@ profile exo-compose-mail @{exec_path} {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
# Mail clients
@{bin}/thunderbird rPx,

1
apparmor.d/profiles-g-l/gtk-youtube-viewer
View file

@ -25,7 +25,6 @@ profile gtk-youtube-viewer @{exec_path} {
network netlink raw,
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,

1
apparmor.d/profiles-g-l/hw-probe
View file

@ -19,7 +19,6 @@ profile hw-probe @{exec_path} flags=(attach_disconnected) {
network inet6 dgram,
@{exec_path} rm,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/{,e}grep rix,

1
apparmor.d/profiles-g-l/inxi
View file

@ -20,7 +20,6 @@ profile inxi @{exec_path} {
network netlink raw,
@{exec_path} r,
@{bin}/perl r,
@{bin}/ r,
@{sh_path} rix,

1
apparmor.d/profiles-g-l/ipcalc
View file

@ -13,7 +13,6 @@ profile ipcalc @{exec_path} {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
include if exists <local/ipcalc>
}

2
apparmor.d/profiles-g-l/linux-check-removal
View file

@ -14,7 +14,6 @@ profile linux-check-removal @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
# Think what to do about this (#FIXME#)
/usr/share/debconf/frontend rPx,
@ -28,7 +27,6 @@ profile linux-check-removal @{exec_path} flags=(complain) {
include <abstractions/nameservice-strict>
/usr/share/debconf/frontend r,
@{bin}/perl r,
@{bin}/linux-check-removal rPx,

1
apparmor.d/profiles-g-l/linux-version
View file

@ -14,7 +14,6 @@ profile linux-version @{exec_path} {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
/boot/ r,

2
apparmor.d/profiles-m-r/pam-auth-update
View file

@ -14,7 +14,6 @@ profile pam-auth-update @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} mr,
@{bin}/perl r,
@{bin}/md5sum rix,
@{bin}/cp rix,
@ -35,7 +34,6 @@ profile pam-auth-update @{exec_path} flags=(complain) {
include <abstractions/nameservice-strict>
/usr/share/debconf/frontend r,
@{bin}/perl r,
@{bin}/pam-auth-update rPx,

1
apparmor.d/profiles-m-r/popularity-contest
View file

@ -21,7 +21,6 @@ profile popularity-contest @{exec_path} {
ptrace (read),
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/env rix,

2
apparmor.d/profiles-s-z/tasksel
View file

@ -13,7 +13,6 @@ profile tasksel @{exec_path} flags=(complain) {
include <abstractions/perl>
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/tempfile rix,
@ -56,7 +55,6 @@ profile tasksel @{exec_path} flags=(complain) {
include <abstractions/nameservice-strict>
/usr/share/debconf/frontend r,
@{bin}/perl r,
@{bin}/tasksel rPx,

1
apparmor.d/profiles-s-z/tpacpi-bat
View file

@ -13,7 +13,6 @@ profile tpacpi-bat @{exec_path} {
include <abstractions/perl>
@{exec_path} mr,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/cat rix,

1
apparmor.d/profiles-s-z/update-dlocatedb
View file

@ -39,7 +39,6 @@ profile update-dlocatedb @{exec_path} {
include <abstractions/perl>
/usr/share/dlocate/updatedb r,
@{bin}/perl r,
/etc/default/dlocate r,

1
apparmor.d/profiles-s-z/youtube-viewer
View file

@ -24,7 +24,6 @@ profile youtube-viewer @{exec_path} {
network netlink raw,
@{exec_path} r,
@{bin}/perl r,
@{sh_path} rix,
@{bin}/infocmp rix,