felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): allow needrestart to scan more directories.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-30 22:16:45 +02:00
parent b9eaa840bd
commit d162032af9
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 8 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

19
apparmor.d/profiles-m-r/needrestart
View file

@ -26,7 +26,6 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix, @{exec_path} mrix,
@{bin}/* r,
@{sh_path} rix, @{sh_path} rix,
@{bin}/dpkg-query rpx, @{bin}/dpkg-query rpx,
@{bin}/fail2ban-server rPx, @{bin}/fail2ban-server rPx,
@ -43,11 +42,6 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
@{lib}/needrestart/* rPx, @{lib}/needrestart/* rPx,
/usr/share/debconf/frontend rix, /usr/share/debconf/frontend rix,
@{att}/@{lib}/@{python_name}/** r,
/usr/share/needrestart/{,**} r,
/usr/share/unattended-upgrades/unattended-upgrade-shutdown r,
/etc/debconf.conf r, /etc/debconf.conf r,
/etc/init.d/* r, /etc/init.d/* r,
/etc/needrestart/{,**} r, /etc/needrestart/{,**} r,
@ -56,11 +50,14 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
/ r, / r,
/boot/ r, /boot/ r,
/boot/intel-ucode.img r, /boot/* r,
/boot/vmlinuz* r, /opt/*/** r,
@{bin}/* r,
owner /var/lib/juju/agents/{,**} r, @{lib}/** r,
owner /var/cache/debconf/{config,passwords,templates}.dat{,-new,-old} rwk, @{sbin}/** r,
@{att}/@{lib}/** r,
/usr/share/** r,
/var/lib/*/** r,
/tmp/@{word10}/ rw, /tmp/@{word10}/ rw,