felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update pacman profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2025-07-12 20:09:41 +02:00
parent a2a402d8a9
commit da9cb8c786
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/groups/pacman/makepkg
View file

@ -11,6 +11,7 @@ profile makepkg @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/path>
include <abstractions/perl>
include <abstractions/python>
include <abstractions/shells>
@ -72,8 +73,8 @@ profile makepkg @{exec_path} {
owner @{run}/user/@{uid}/gnupg/d.@{rand}/S.scdaemon rw,
owner @{run}/user/@{uid}/gnupg/S.scdaemon rw,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
@{PROC}/@{pid}/fd/ r,
@{PROC}/@{pid}/task/@{tid}/comm rw,
include if exists <local/makepkg_gpg>
}

1
apparmor.d/groups/pacman/paccache
View file

@ -36,6 +36,7 @@ profile paccache @{exec_path} flags=(attach_disconnected) {
/etc/pacman.conf r,
/etc/pacman.d/{,**} r,
/etc/pacman.d/gnupg/** rwlk -> /etc/pacman.d/gnupg/**,
/var/cache/pacman/pkg/{,*} rw,
/var/lib/pacman/{,**} r,

2
apparmor.d/groups/pacman/pacman
View file

@ -187,7 +187,7 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
include if exists <local/pacman_gpg>
}
profile systemctl {
profile systemctl flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/app/systemctl>