felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add a few small profile needed by fsp.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-29 23:26:18 +02:00
parent 1aa0142a6a
commit d5a65ba831
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 77 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

18
apparmor.d/profiles-a-f/e2scrub Normal file
View file

@ -0,0 +1,18 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{sbin}/e2scrub
profile e2scrub @{exec_path} flags=(complain) {
include <abstractions/base>
@{exec_path} mr,
include if exists <local/e2scrub>
}
# vim:syntax=apparmor

19
apparmor.d/profiles-m-r/open-iscsi-net-interface-handler Normal file
View file

@ -0,0 +1,19 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{lib}/open-iscsi/net-interface-handler
profile open-iscsi-net-interface-handler @{exec_path} flags=(complain) {
include <abstractions/base>
@{exec_path} mr,
@{sh_path} r,
include if exists <local/open-iscsi-net-interface-handler>
}
# vim:syntax=apparmor

19
apparmor.d/profiles-s-z/u-d-c-print-pci-ids Normal file
View file

@ -0,0 +1,19 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{sbin}/u-d-c-print-pci-ids
profile u-d-c-print-pci-ids @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
@{sh_path} r,
include if exists <local/u-d-c-print-pci-ids>
}
# vim:syntax=apparmor

21
apparmor.d/profiles-s-z/udev-bridge-network-interface Normal file
View file

@ -0,0 +1,21 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{lib}/udev/bridge-network-interface
profile udev-bridge-network-interface @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
@{sh_path} r,
/etc/default/bridge-utils r,
include if exists <local/udev-bridge-network-interface>
}
# vim:syntax=apparmor