felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update apt profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2025-06-21 19:44:43 +02:00
parent ea45cec24d
commit cd619d280a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
5 changed files with 20 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/groups/apt/dpkg-scripts
View file

@ -58,7 +58,12 @@ profile dpkg-scripts @{exec_path} {
/ r,
/*/ r,
@{bin}/ r,
@{bin}/* w,
@{lib}/ r,
@{lib}/@{python_name}/**/__pycache__/ w,
@{lib}/@{python_name}/**/__pycache__/**.pyc w,
@{lib}/@{python_name}/**/__pycache__/**.pyc.@{u64} w,
/etc/ r,
/etc/** rw,
/usr/share/*/{,**} rw,
@ -71,6 +76,8 @@ profile dpkg-scripts @{exec_path} {
/tmp/sed@{rand6} rw,
/tmp/tmp.@{rand10} rw,
@{PROC}/@{pid}/fd/ r,
profile bus {
include <abstractions/base>
include <abstractions/app/bus>
@ -104,6 +111,10 @@ profile dpkg-scripts @{exec_path} {
@{bin}/systemd-tty-ask-password-agent Px,
@{pager_path} Px -> child-pager,
/etc/machine-id r,
/var/lib/systemd/catalog/database r,
/{run,var}/log/journal/ r,
/{run,var}/log/journal/@{hex32}/ r,
/{run,var}/log/journal/@{hex32}/system.journal* r,