feat(profile): general update.
This commit is contained in:
parent
9f3be7a96d
commit
cf4e47f10f
22 changed files with 75 additions and 29 deletions
|
|
@ -11,8 +11,26 @@ profile systemd-portabled @{exec_path} {
|
|||
include <abstractions/base>
|
||||
include <abstractions/systemd-common>
|
||||
|
||||
capability chown,
|
||||
capability dac_override,
|
||||
capability dac_read_search,
|
||||
capability fowner,
|
||||
capability fsetid,
|
||||
capability kill,
|
||||
capability mknod,
|
||||
capability setgid,
|
||||
capability sys_admin,
|
||||
capability sys_chroot,
|
||||
capability sys_ptrace,
|
||||
|
||||
network inet stream,
|
||||
network inet6 stream,
|
||||
network inet dgram,
|
||||
network inet6 dgram,
|
||||
network netlink raw,
|
||||
|
||||
# dbus: own bus=system name=org.freedesktop.portable1
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
/var/lib/portables/{,**} rw,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue