felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-10 19:35:04 +00:00
parent b0d52d68f4
commit beaf1bad16
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
29 changed files with 121 additions and 58 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/profiles-s-z/snap
View file

@ -46,7 +46,7 @@ profile snap @{exec_path} {
@{bin}/mount rix,
@{bin}/gpg{,2} rCx -> gpg,
@{bin}/systemctl rPx -> child-systemctl,
@{bin}/systemctl rCx -> systemctl,
@{lib_dirs}/snapd/snap-confine rPx,
@{lib_dirs}/snapd/snap-seccomp rPx,
@ -58,8 +58,9 @@ profile snap @{exec_path} {
/var/cache/snapd/commands.db rwk,
/var/cache/snapd/names r,
/snap/{,**} rw,
@{HOME}/snap/{,**} rw,
/snap/{,**} rw,
/var/lib/gdm{,3}/snap/{,**} rw,
owner /tmp/snapd-auto-import-mount-@{int}/ rw,
@ -104,5 +105,12 @@ profile snap @{exec_path} {
include if exists <local/snap_gpg>
}
profile systemctl {
include <abstractions/base>
include <abstractions/systemctl>
include if exists <local/snap_systemctl>
}
include if exists <local/snap>
}