felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): replace @{md5} by @{hex32}.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-19 21:26:12 +00:00
parent ceb78d971e
commit bf613f59a5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
24 changed files with 59 additions and 56 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/groups/systemd/journalctl
View file

@ -36,12 +36,14 @@ profile journalctl @{exec_path} flags=(attach_disconnected) {
/var/lib/systemd/catalog/.#database* rw,
/{run,var}/log/journal/ r,
/{run,var}/log/journal/@{md5}/ r,
/{run,var}/log/journal/@{md5}/system.journal* r,
/{run,var}/log/journal/@{md5}/system@@{hex}.journal* rw,
/{run,var}/log/journal/@{md5}/user-@{hex}.journal* rw,
owner /{run,var}/log/journal/@{md5}/fss wl -> /var/log/journal/@{md5}/fss.tmp.*,
owner /{run,var}/log/journal/@{md5}/fss.tmp.* rw,
/{run,var}/log/journal/@{hex32}/ r,
/{run,var}/log/journal/@{hex32}/system.journal* r,
/{run,var}/log/journal/@{hex32}/system@@{hex32}-@{hex}-@{hex}.journal* rw,
/{run,var}/log/journal/@{hex32}/user-@{hex}.journal* rw,
/{run,var}/log/journal/@{hex32}/user-@{uid}@@{hex}-@{hex}.journal* rw,
/{run,var}/log/journal/@{hex32}/user-@{uid}@@{hex32}-@{hex}-@{hex}.journal* rw,
owner /{run,var}/log/journal/@{hex32}/fss wl -> /var/log/journal/@{hex32}/fss.tmp.*,
owner /{run,var}/log/journal/@{hex32}/fss.tmp.* rw,
owner /var/tmp/#@{int} rw,
@{run}/host/container-manager r,

8
apparmor.d/groups/systemd/networkctl
View file

@ -46,10 +46,10 @@ profile networkctl @{exec_path} flags=(attach_disconnected) {
# To be able to read logs
@{run}/log/ r,
/{run,var}/log/journal/ r,
/{run,var}/log/journal/@{md5}/ r,
/{run,var}/log/journal/@{md5}/user-@{hex}.journal* r,
/{run,var}/log/journal/@{md5}/system.journal* r,
/{run,var}/log/journal/@{md5}/system@@{hex}.journal* r,
/{run,var}/log/journal/@{hex32}/ r,
/{run,var}/log/journal/@{hex32}/user-@{hex}.journal* r,
/{run,var}/log/journal/@{hex32}/system.journal* r,
/{run,var}/log/journal/@{hex32}/system@@{hex}.journal* r,
@{run}/systemd/netif/leases/@{int} r,
@{run}/systemd/netif/links/@{int} r,

4
apparmor.d/groups/systemd/systemd-journald
View file

@ -36,8 +36,8 @@ profile systemd-journald @{exec_path} {
@{run}/log/ rw,
/{run,var}/log/journal/ rw,
/{run,var}/log/journal/@{md5}/ rw,
/{run,var}/log/journal/@{md5}/* rwl -> /{run,var}/log/journal/@{md5}/#@{int},
/{run,var}/log/journal/@{hex32}/ rw,
/{run,var}/log/journal/@{hex32}/* rwl -> /{run,var}/log/journal/@{hex32}/#@{int},
owner @{run}/systemd/journal/{,**} rw,
owner @{run}/systemd/notify rw,