felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-08-13 20:31:57 +01:00
parent e02b12aa6d
commit c148aa978c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
30 changed files with 202 additions and 71 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/profiles-s-z/snapd
View file

@ -72,14 +72,17 @@ profile snapd @{exec_path} {
/snap/snapd/[0-9]*/usr/lib/snapd/snap-seccomp rPx,
/snap/snapd/[0-9]*/usr/lib/snapd/snap-update-ns rPx,
/snap/snapd/[0-9]*/usr/lib/snapd/snapd rix,
/snap/snapd/[0-9]*/usr/bin/fc-cache-* rPx -> fc-cache,
/snap/snapd/[0-9]*/usr/bin/xdelta3 rix, # TODO: rPx ?
/usr/share/bash-completion/completions/{,**} r,
/usr/share/dbus-1/{system,session}.d/{,snapd*} r,
/usr/share/dbus-1/services/*snap* r,
/usr/share/polkit-1/actions/{,**/} r,
/etc/dbus-1/system.d/{,**/} r,
/etc/fstab r,
/etc/mime.types r,
/etc/modprobe.d/{,**/} r,
/etc/modules-load.d/{,**/} r,
/etc/systemd/system/{,**/} r,
@ -101,8 +104,8 @@ profile snapd @{exec_path} {
/tmp/syscheck-squashfs-[0-9]* rw,
/tmp/read-file[0-9]*/{,**} rw,
owner @{HOME}/ r,
owner @{HOME}/snap/{,**} rw,
@{HOME}/ r,
@{HOME}/snap/{,**} rw,
owner @{run}/mount/ rw,
owner @{run}/mount/utab{,.*} rw,
@ -113,14 +116,14 @@ profile snapd @{exec_path} {
@{run}/snapd-snap.socket rw,
@{run}/snapd.socket rw,
@{run}/snapd/lock/core[0-9]*.lock rwk,
@{run}/snapd/lock/*.lock rwk,
@{run}/systemd/notify rw,
@{run}/systemd/private rw,
@{sys}/fs/cgroup/{,*/} r,
@{sys}/fs/cgroup/system.slice/{,**/} r,
@{sys}/fs/cgroup/user.slice/ r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/**/ r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/{,**/} r,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
@{sys}/kernel/security/apparmor/features/ r,
@{sys}/kernel/security/apparmor/profiles r,