felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-11-21 20:08:48 +00:00
parent 65f2d21558
commit cb86f1c076
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 17 additions and 82 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/profiles-s-z/sudo
View file

@ -21,15 +21,9 @@ profile sudo @{exec_path} flags=(attach_disconnected) {
network inet dgram,
network inet6 dgram,
ptrace (read),
ptrace read,
signal (send,receive) peer=cockpit-bridge,
signal (send) peer=@{p_systemd},
signal (send) set=(cont,hup,winch) peer=su,
signal (send) set=(winch) peer=child-pager,
signal (send) set=(winch) peer=journalctl,
signal (send) set=(winch) peer=pacman,
signal (send) set=(winch, hup, term) peer=rpm,
signal send set=(winch, hup, term),
@{bin}/@{shells} rUx,
@{lib}/** PUx,

3
apparmor.d/profiles-s-z/udisksd
View file

@ -48,6 +48,8 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
mount options=(rw move) -> @{MOUNTS}/,
mount options=(rw move) -> @{MOUNTS}/*/,
mount fstype=vfat -> /boot/efi/,
# Allow mounting on temporary mount point
mount -> @{run}/udisks2/temp-mount-*/,
mount / -> @{MOUNTS}/*/,
@ -56,6 +58,7 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
umount @{MOUNTS}/,
umount @{MOUNTS}/*/,
umount @{run}/udisks2/temp-mount-*/,
umount /boot/efi/,
umount /media/cdrom@{int}/,
signal receive set=int peer=@{p_systemd},

1
apparmor.d/profiles-s-z/virt-manager
View file

@ -89,6 +89,7 @@ profile virt-manager @{exec_path} flags=(attach_disconnected) {
@{PROC}/@{pids}/net/route r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,