felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-11-21 20:08:48 +00:00
parent 65f2d21558
commit cb86f1c076
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 17 additions and 82 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/freedesktop/geoclue
View file

@ -9,6 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/geoclue @{lib}/geoclue-2.0/demos/agent
profile geoclue @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/attached/consoles>
include <abstractions/bus-system>
include <abstractions/bus/fi.w1.wpa_supplicant1>
include <abstractions/bus/org.freedesktop.Avahi>

2
apparmor.d/groups/freedesktop/polkit-agent-helper
View file

@ -9,7 +9,7 @@ include <tunables/global>
@{exec_path} = @{lib}/polkit-[0-9]/polkit-agent-helper-[0-9]
@{exec_path} += @{lib}/polkit-agent-helper-[0-9]
profile polkit-agent-helper @{exec_path} {
profile polkit-agent-helper @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/authentication>
include <abstractions/bus-system>

1
apparmor.d/groups/systemd/systemd-sleep-nvidia
View file

@ -11,6 +11,7 @@ profile systemd-sleep-nvidia @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
capability perfmon,
capability sys_admin,
capability sys_tty_config,

1
apparmor.d/groups/virt/containerd-shim-runc-v2
View file

@ -50,6 +50,7 @@ profile containerd-shim-runc-v2 @{exec_path} flags=(attach_disconnected) {
@{sys}/fs/cgroup/kubepods/{,**} rw,
@{sys}/kernel/mm/hugepages/ r,
@{PROC}/@{pid}/task/@{tid}/mountinfo r,
@{PROC}/@{pids}/cgroup r,
@{PROC}/@{pids}/mountinfo r,
@{PROC}/@{pids}/oom_score_adj rw,