fix(profile): apply some fix raised by the test suite.
This commit is contained in:
parent
1f869c12ad
commit
cca8e6508f
24 changed files with 65 additions and 12 deletions
|
|
@ -121,9 +121,11 @@ profile snapd @{exec_path} {
|
|||
/var/cache/apparmor/*/snap* rw,
|
||||
|
||||
/tmp/ r,
|
||||
/tmp/read-file@{int}/{,**} rw,
|
||||
/tmp/snapd@{int}/ rw,
|
||||
/tmp/snapd@{int}/** rw,
|
||||
/tmp/syscheck-mountpoint-@{int}/{,**} rw,
|
||||
/tmp/syscheck-squashfs-@{int} rw,
|
||||
/tmp/read-file@{int}/{,**} rw,
|
||||
|
||||
/boot/ r,
|
||||
/boot/grub/grubenv r,
|
||||
|
|
|
|||
|
|
@ -29,6 +29,9 @@ profile sudo @{exec_path} flags=(attach_disconnected) {
|
|||
signal (send) set=(winch) peer=child-pager,
|
||||
signal (send) set=(winch) peer=journalctl,
|
||||
signal (send) set=(winch) peer=pacman,
|
||||
signal (send) set=(winch, hup, term) peer=rpm,
|
||||
|
||||
unix bind type=stream addr=@@{hex16}/bus/sudo/system/,
|
||||
|
||||
@{bin}/@{shells} rUx,
|
||||
@{lib}/** PUx,
|
||||
|
|
|
|||
|
|
@ -7,11 +7,18 @@ abi <abi/4.0>,
|
|||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{bin}/uuidd
|
||||
profile uuidd @{exec_path} {
|
||||
profile uuidd @{exec_path} flags=(attach_disconnected) {
|
||||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
|
||||
network inet dgram,
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
owner /var/lib/libuuid/clock.txt rwk,
|
||||
|
||||
@{att}/@{run}/uuidd/request w,
|
||||
|
||||
include if exists <local/uuidd>
|
||||
}
|
||||
|
||||
|
|
|
|||
|
|
@ -11,8 +11,14 @@ profile uuidgen @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/consoles>
|
||||
|
||||
network inet dgram,
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
owner /var/lib/libuuid/clock.txt w,
|
||||
|
||||
@{run}/uuidd/request w,
|
||||
|
||||
include if exists <local/uuidgen>
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue