felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): improve ubuntu compatibility.

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-13 22:04:12 +01:00
parent 0cbcbb29a4
commit d998b1dd6e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
29 changed files with 109 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/ssh/sshd
View file

@ -30,6 +30,7 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
capability audit_write,
capability chown,
capability dac_read_search,
capability fowner,
capability kill,
capability net_bind_service,
capability setgid,
@ -86,6 +87,7 @@ profile sshd @{exec_path} flags=(attach_disconnected) {
@{run}/resolvconf/resolv.conf r,
@{run}/systemd/notify w,
@{run}/systemd/sessions/*.ref rw,
@{run}/faillock/[a-zA-z0-9]* rwk,
@{sys}/fs/cgroup/*/user/*/[0-9]*/ rw,
@{sys}/fs/cgroup/systemd/user.slice/user-@{uid}.slice/session-*.scope/ rw,