felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): ensure we use which{,.debianutils} instead of which.

Browse source
This commit is contained in:
Alexandre Pujol 2025-06-19 23:16:16 +02:00
parent d2dbf771cc
commit be62e5186f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
35 changed files with 35 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/apt/apt-systemd-daily
View file

@ -37,7 +37,7 @@ profile apt-systemd-daily @{exec_path} {
@{bin}/touch rix,
@{bin}/uniq rix,
@{bin}/wc rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/xargs rix,
@{bin}/apt-config rPx,

2
apparmor.d/groups/apt/aptitude-create-state-bundle
View file

@ -16,7 +16,7 @@ profile aptitude-create-state-bundle @{exec_path} {
@{exec_path} r,
@{sh_path} rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/tar rix,
@{bin}/bzip2 rix,
@{bin}/gzip rix,

2
apparmor.d/groups/browsers/brave-wrapper
View file

@ -23,7 +23,7 @@ profile brave-wrapper @{exec_path} {
@{bin}/mkdir rix,
@{bin}/readlink rix,
@{bin}/touch rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{lib_dirs}/brave rPx,

2
apparmor.d/groups/browsers/chrome-wrapper
View file

@ -22,7 +22,7 @@ profile chrome-wrapper @{exec_path} flags=(attach_disconnected) {
@{bin}/mkdir rix,
@{bin}/readlink rix,
@{bin}/touch rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{lib_dirs}/chrome rPx,

2
apparmor.d/groups/browsers/msedge-wrapper
View file

@ -22,7 +22,7 @@ profile msedge-wrapper @{exec_path} flags=(attach_disconnected) {
@{bin}/mkdir rix,
@{bin}/readlink rix,
@{bin}/touch rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{lib_dirs}/msedge rPx,

2
apparmor.d/groups/cron/cron-apt-compat
View file

@ -22,7 +22,7 @@ profile cron-apt-compat @{exec_path} {
@{bin}/dd rix,
@{bin}/cksum rix,
@{bin}/cut rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/sleep rix,
include if exists <local/cron-apt-compat>

3
apparmor.d/groups/cron/cron-apt-xapian-index
View file

@ -14,9 +14,8 @@ profile cron-apt-xapian-index @{exec_path} {
@{exec_path} r,
@{sh_path} rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/{,e}grep rix,
@{bin}/nice rix,
@{bin}/ionice rix,

2
apparmor.d/groups/cron/cron-aptitude
View file

@ -17,7 +17,7 @@ profile cron-aptitude @{exec_path} {
@{bin}/cp rix,
@{bin}/date rix,
@{bin}/basename rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/dirname rix,
@{bin}/rm rix,
@{bin}/mv rix,

2
apparmor.d/groups/cron/cron-mlocate
View file

@ -15,7 +15,7 @@ profile cron-mlocate @{exec_path} {
@{exec_path} r,
@{sh_path} rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/true rix,
@{bin}/flock rix,
@{bin}/nocache rix,

2
apparmor.d/groups/cron/cron-plocate
View file

@ -15,7 +15,7 @@ profile cron-plocate @{exec_path} {
@{exec_path} r,
@{sh_path} rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/true rix,
@{bin}/flock rix,
@{bin}/nocache rix,

2
apparmor.d/groups/cron/cron-popularity-contest
View file

@ -74,7 +74,7 @@ profile cron-popularity-contest @{exec_path} {
@{bin}/mv rix,
@{bin}/rm rix,
@{bin}/touch rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{sh_path} rix,
/var/log/ r,

2
apparmor.d/groups/display-manager/x11-xsession
View file

@ -34,7 +34,7 @@ profile x11-xsession @{exec_path} {
@{bin}/tail rix,
@{bin}/tempfile rix,
@{bin}/touch rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/dbus-update-activation-environment rCx -> dbus,

2
apparmor.d/groups/gnome/gdm-xsession
View file

@ -35,7 +35,7 @@ profile gdm-xsession @{exec_path} {
@{bin}/tr rix,
@{bin}/truncate rix,
@{bin}/tty rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/zsh rix,
@{bin}/dbus-update-activation-environment rCx -> dbus,

2
apparmor.d/groups/kde/sddm-xsession
View file

@ -40,7 +40,7 @@ profile sddm-xsession @{exec_path} {
@{bin}/tcsh rix,
@{bin}/tempfile rix,
@{bin}/touch rix,
@{bin}/which{,.*} rix,
@{bin}/which{,.debianutils} rix,
@{bin}/zsh rix,
@{bin}/dbus-update-activation-environment rCx -> dbus,

2
apparmor.d/groups/network/openvpn
View file

@ -84,7 +84,7 @@ profile openvpn @{exec_path} flags=(attach_disconnected) {
@{sh_path} rix,
@{bin}/cut rix,
@{bin}/ip rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{sbin}/xtables-nft-multi rix,
/etc/iproute2/rt_tables r,

2
apparmor.d/groups/pacman/pacman
View file

@ -101,7 +101,7 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
@{sbin}/update-grub rPx,
@{bin}/update-mime-database rPx,
@{bin}/vercmp rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{bin}/xmlcatalog rix,
@{lib}/systemd/systemd-* rPx,
@{lib}/ghc-@{version}/bin/ghc-pkg-@{version} rPx,

2
apparmor.d/groups/ubuntu/apport-gtk
View file

@ -52,7 +52,7 @@ profile apport-gtk @{exec_path} {
@{bin}/systemctl rCx -> systemctl,
@{bin}/systemd-detect-virt rPx,
@{bin}/uname rix,
@{bin}/which rix,
@{bin}/which{,.debianutils} rix,
@{lib}/{,colord/}colord-sane rPx,
@{lib}/@{multiarch}/ld*.so* rix,
/usr/share/apport/root_info_wrapper rix,