felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

reverting to Ubuntu compatibility only

Browse source
This commit is contained in:
nobodysu 2022-05-23 20:22:59 +03:00
parent 412e9eee32
commit d0d55e5e3b
1 changed files with 8 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/groups/ssh/sshd
View file

@ -48,8 +48,8 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
/{usr/,}bin/{,b,d,rb}ash rPUx,
/{usr/,}bin/{c,k,tc,z}sh rPUx,
/{usr/,}bin/{,b,d,rb}ash rUx,
/{usr/,}bin/{c,k,tc,z}sh rUx,
/{usr/,}{s,}bin/nologin rPx,
/{usr/,}bin/passwd rPx,
/{usr/,}lib/openssh/sftp-server rPx,
@ -81,16 +81,15 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
@{sys}/fs/cgroup/*/user/*/[0-9]*/ rw,
@{sys}/fs/cgroup/systemd/user.slice/user-@{uid}.slice/session-c[0-9]*.scope/ rw,
owner @{PROC}/@{pids}/limits r,
owner @{PROC}/@{pids}/loginuid rw,
owner @{PROC}/@{pids}/mounts r,
owner @{PROC}/@{pids}/oom_adj rw,
owner @{PROC}/@{pids}/oom_score_adj rw,
owner @{PROC}/@{pids}/uid_map r,
owner @{PROC}/@{pid}/limits r,
owner @{PROC}/@{pid}/loginuid rw,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/oom_adj rw,
owner @{PROC}/@{pid}/oom_score_adj rw,
owner @{PROC}/@{pid}/uid_map r,
@{PROC}/@{pids}/fd/ r,
@{PROC}/1/environ r,
@{PROC}/cmdline r,
@{PROC}/cmdline r,
@{PROC}/filesystems r,
@{PROC}/sys/kernel/ngroups_max r,