felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-03 16:57:50 +00:00
parent 1edf507abf
commit dd1d9107e8
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 41 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/systemd/systemd-logind
View file

@ -126,6 +126,7 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected,complain) {
@{sys}/devices/virtual/tty/tty[0-9]*/active r,
@{sys}/firmware/efi/efivars/LoaderEntries-@{uuid} r,
@{sys}/firmware/efi/efivars/LoaderFeatures-@{uuid} r,
@{sys}/firmware/efi/efivars/LoaderInfo-@{uuid} r,
@{sys}/firmware/efi/efivars/OsIndications-@{uuid} r,
@{sys}/firmware/efi/efivars/OsIndicationsSupported-@{uuid} r,
@{sys}/fs/cgroup/memory.max r,

3
apparmor.d/groups/systemd/systemd-networkd
View file

@ -14,8 +14,9 @@ profile systemd-networkd @{exec_path} flags=(attach_disconnected,complain) {
include <abstractions/systemd-common>
capability net_admin,
capability net_raw,
capability net_bind_service,
capability net_broadcast,
capability net_raw,
network inet dgram,
network inet6 dgram,