feat(profile): general update.

This commit is contained in:
Alexandre Pujol 2024-03-15 16:07:53 +00:00
parent 9f3be7a96d
commit cf4e47f10f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
22 changed files with 75 additions and 29 deletions

View file

@ -11,8 +11,26 @@ profile systemd-portabled @{exec_path} {
include <abstractions/base>
include <abstractions/systemd-common>
capability chown,
capability dac_override,
capability dac_read_search,
capability fowner,
capability fsetid,
capability kill,
capability mknod,
capability setgid,
capability sys_admin,
capability sys_chroot,
capability sys_ptrace,
network inet stream,
network inet6 stream,
network inet dgram,
network inet6 dgram,
network netlink raw,
# dbus: own bus=system name=org.freedesktop.portable1
@{exec_path} mr,
/var/lib/portables/{,**} rw,