feat(profile): general update.
This commit is contained in:
parent
c9b87efebe
commit
be3d625b7f
8 changed files with 41 additions and 40 deletions
|
|
@ -86,20 +86,10 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
profile systemctl flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/wutmp>
|
||||
include <abstractions/systemctl>
|
||||
|
||||
capability net_admin,
|
||||
capability sys_ptrace,
|
||||
ptrace (read),
|
||||
|
||||
@{bin}/systemctl mr,
|
||||
|
||||
owner @{PROC}/@{pid}/stat r,
|
||||
@{PROC}/1/environ r,
|
||||
@{PROC}/1/sched r,
|
||||
@{PROC}/cmdline r,
|
||||
@{PROC}/sys/kernel/osrelease r,
|
||||
|
||||
/dev/kmsg rw,
|
||||
|
||||
include if exists <local/logrotate_systemctl>
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue