felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve integration with opensuse.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-17 22:47:36 +00:00
parent eb66feef62
commit bf22e0770f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 63 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

28
apparmor.d/profiles-g-l/htop
View file

@ -83,10 +83,13 @@ profile htop @{exec_path} {
@{PROC}/@{pids}/task/@{tid}/status r,
@{PROC}/@{pids}/task/@{tid}/wchan r,
@{sys}/bus/dax/devices/ r,
@{sys}/bus/i2c/devices/ r,
@{sys}/bus/soc/devices/ r,
@{sys}/class/hwmon/ r,
@{sys}/class/i2c-adapter/ r,
@{sys}/class/power_supply/ r,
@{sys}/devices/@{pci}/i2c-@{int}/name r,
@{sys}/devices/**/hwmon@{int}/ r,
@{sys}/devices/**/hwmon@{int}/{name,temp*} r,
@{sys}/devices/**/hwmon@{int}/**/ r,
@ -98,16 +101,37 @@ profile htop @{exec_path} {
@{sys}/devices/**/power_supply/**/{uevent,type,online} r,
@{sys}/devices/*/name r,
@{sys}/devices/i2c-@{int}/name r,
@{sys}/devices/@{pci}/i2c-@{int}/name r,
@{sys}/devices/platform/*/i2c-@{int}/name r,
@{sys}/devices/system/cpu/cpu@{int}/online r,
@{sys}/devices/system/cpu/cpu@{int}/** r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/cpuinfo_{cur,min,max}_freq r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_{cur,min,max}_freq r,
@{sys}/devices/system/node/node@{int}/cpumap r,
@{sys}/devices/system/node/node@{int}/hugepages/ r,
@{sys}/devices/system/node/node@{int}/hugepages/hugepages-*/nr_hugepages r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{sys}/devices/system/node/online r,
@{sys}/devices/virtual/block/zram@{int}/{disksize,mm_stat} r,
@{sys}/devices/virtual/dmi/id/ r,
@{sys}/devices/virtual/dmi/id/bios_date r,
@{sys}/devices/virtual/dmi/id/bios_vendor r,
@{sys}/devices/virtual/dmi/id/bios_version r,
@{sys}/devices/virtual/dmi/id/chassis_asset_tag r,
@{sys}/devices/virtual/dmi/id/chassis_type r,
@{sys}/devices/virtual/dmi/id/chassis_vendor r,
@{sys}/devices/virtual/dmi/id/chassis_version r,
@{sys}/devices/virtual/dmi/id/product_name r,
@{sys}/devices/virtual/dmi/id/product_version r,
@{sys}/devices/virtual/dmi/id/sys_vendor r,
@{sys}/devices/virtual/thermal/thermal_zone@{int}/temp r,
@{sys}/fs/cgroup/cgroup.controllers r,
@{sys}/fs/cgroup/cpuset.cpus.effective r,
@{sys}/fs/cgroup/cpuset.mems.effective r,
@{sys}/kernel/mm/hugepages/ r,
@{sys}/kernel/mm/hugepages/hugepages-*/nr_hugepages r,
@{PROC}/cmdline r,
owner @{PROC}/@{pid}/cpuset r,
/dev/tty@{int} rw,
include if exists <local/htop>