fix(profile): apply some fix raised by the test suite.

This commit is contained in:
Alexandre Pujol 2024-10-22 00:37:50 +01:00
parent 1f869c12ad
commit cca8e6508f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
24 changed files with 65 additions and 12 deletions

View file

@ -121,9 +121,11 @@ profile snapd @{exec_path} {
/var/cache/apparmor/*/snap* rw,
/tmp/ r,
/tmp/read-file@{int}/{,**} rw,
/tmp/snapd@{int}/ rw,
/tmp/snapd@{int}/** rw,
/tmp/syscheck-mountpoint-@{int}/{,**} rw,
/tmp/syscheck-squashfs-@{int} rw,
/tmp/read-file@{int}/{,**} rw,
/boot/ r,
/boot/grub/grubenv r,

View file

@ -29,6 +29,9 @@ profile sudo @{exec_path} flags=(attach_disconnected) {
signal (send) set=(winch) peer=child-pager,
signal (send) set=(winch) peer=journalctl,
signal (send) set=(winch) peer=pacman,
signal (send) set=(winch, hup, term) peer=rpm,
unix bind type=stream addr=@@{hex16}/bus/sudo/system/,
@{bin}/@{shells} rUx,
@{lib}/** PUx,

View file

@ -7,11 +7,18 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/uuidd
profile uuidd @{exec_path} {
profile uuidd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
network inet dgram,
@{exec_path} mr,
owner /var/lib/libuuid/clock.txt rwk,
@{att}/@{run}/uuidd/request w,
include if exists <local/uuidd>
}

View file

@ -11,8 +11,14 @@ profile uuidgen @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
network inet dgram,
@{exec_path} mr,
owner /var/lib/libuuid/clock.txt w,
@{run}/uuidd/request w,
include if exists <local/uuidgen>
}