felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-07-18 11:36:16 +01:00
parent 081308db2f
commit c750cb1b77
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 15 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/ubuntu/do-release-upgrade
View file

@ -15,14 +15,18 @@ profile do-release-upgrade @{exec_path} {
include <abstractions/python>
include <abstractions/ssl_certs>
capability net_admin,
network inet dgram,
network inet6 dgram,
network inet stream,
network inet6 stream,
network netlink raw,
@{exec_path} mr,
/{usr/,}bin/dpkg rPx -> child-dpkg,
/{usr/,}bin/ischroot rix,
/{usr/,}bin/lsb_release rPx -> lsb_release,
/usr/share/distro-info/*.csv r,
@ -31,10 +35,11 @@ profile do-release-upgrade @{exec_path} {
/etc/machine-id r,
/etc/update-manager/{,**} r,
/var/lib/update-manager/meta-release-* rw,
/var/lib/update-manager/* rw,
/var/cache/apt/pkgcache.bin{,.*} rw,
owner @{PROC}/@{pid}/fd/ r,
@{PROC}/@{pids}/mountinfo r,
include if exists <local/do-release-upgrade>
}