feat(profile): general update.

This commit is contained in:
Alexandre Pujol 2024-03-16 19:41:27 +00:00
parent c9b87efebe
commit be3d625b7f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
8 changed files with 41 additions and 40 deletions

View file

@ -86,20 +86,10 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
profile systemctl flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/wutmp>
include <abstractions/systemctl>
capability net_admin,
capability sys_ptrace,
ptrace (read),
@{bin}/systemctl mr,
owner @{PROC}/@{pid}/stat r,
@{PROC}/1/environ r,
@{PROC}/1/sched r,
@{PROC}/cmdline r,
@{PROC}/sys/kernel/osrelease r,
/dev/kmsg rw,
include if exists <local/logrotate_systemctl>
}