felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): update debconf abs.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-24 17:48:15 +02:00
parent 3848838e53
commit d5926e9411
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
12 changed files with 35 additions and 82 deletions
Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/profiles-m-r/needrestart
View file

@ -40,7 +40,7 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
@{bin}/whiptail rPx,
@{bin}/who rix,
@{lib}/needrestart/* rPx,
/usr/share/debconf/frontend rix,
/usr/share/debconf/frontend rCx -> debconf,
/etc/debconf.conf r,
/etc/init.d/* r,
@ -97,6 +97,13 @@ profile needrestart @{exec_path} flags=(attach_disconnected) {
include if exists <local/needrestart_udevadm>
}
profile debconf {
include <abstractions/base>
include <abstractions/common/debconf>
include if exists <local/needrestart_debconf>
}
include if exists <local/needrestart>
}

48
apparmor.d/profiles-m-r/pam-auth-update
View file

@ -10,56 +10,18 @@ include <tunables/global>
@{exec_path} = @{sbin}/pam-auth-update
profile pam-auth-update @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/perl>
include <abstractions/common/debconf>
@{exec_path} mr,
@{bin}/md5sum rix,
@{bin}/cp rix,
@{bin}/md5sum ix,
@{bin}/cp ix,
# Think what to do about this (#FIXME#)
/usr/share/debconf/frontend rPx,
#/usr/share/debconf/frontend rCx -> frontend,
/etc/pam.d/* rw,
/var/lib/pam/* rw,
/usr/share/pam{,-configs}/{,*} r,
/etc/pam.d/* rw,
profile frontend flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/perl>
include <abstractions/nameservice-strict>
/usr/share/debconf/frontend r,
@{sbin}/pam-auth-update rPx,
@{sh_path} rix,
@{bin}/stty rix,
@{bin}/locale rix,
/etc/debconf.conf r,
owner /var/cache/debconf/{config,passwords,templates}.dat{,-new,-old} rwk,
/usr/share/debconf/templates/adequate.templates r,
# The following is needed when debconf uses GUI frontends.
include <abstractions/gtk>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read>
include <abstractions/freedesktop.org>
capability dac_read_search,
@{bin}/lsb_release rPx -> lsb_release,
@{bin}/hostname rix,
owner @{PROC}/@{pid}/mounts r,
@{HOME}/.Xauthority r,
/etc/shadow r,
include if exists <local/pam-auth-update_frontend>
}
/var/lib/pam/* rw,
include if exists <local/pam-auth-update>
}