felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update runsvdir

Browse source
This commit is contained in:
Besanon 2024-06-06 18:46:46 +02:00 • committed by GitHub
parent 0e8fa0c39e
commit e2b4317e11
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 24 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

47
apparmor.d/groups/runit/runsvdir
View file

@ -8,8 +8,8 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_pathrunsvdir} = @{bin}/runsvdir @{exec_path} = @{bin}/runsvdir
profile runsvdir @{exec_pathrunsvdir} flags=(attach_disconnected) { profile runsvdir @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus-session> include <abstractions/bus-session>
include <abstractions/bus-system> include <abstractions/bus-system>
@ -28,36 +28,37 @@ profile runsvdir @{exec_pathrunsvdir} flags=(attach_disconnected) {
ptrace (read) peer=elogind, ptrace (read) peer=elogind,
@{exec_pathrunsvdir} mr, @{exec_path} mr,
@{bin}/dbus-send rix, @{bin}/dbus-send rix,
@{bin}/runsv rPx, @{bin}/runsv rPx,
@{bin}/bash rix, @{bin}/bash rix,
@{bin}/utmpset rix, @{bin}/utmpset rix,
@{bin}/mountpoint rix, @{bin}/mountpoint rix,
/etc/sv/**/run rix, /etc/sv/**/run rix,
/etc/sv/**/**/run rix, /etc/sv/**/**/run rix,
/etc/sv/**/finish rix, /etc/sv/**/finish rix,
/etc/sv/**/run rix, /etc/sv/**/run rix,
/etc/sv/dbus/check rix, /etc/sv/dbus/check rix,
owner / r, owner / r,
/etc/elogind/logind.conf rw, /etc/elogind/logind.conf rw,
/etc/machine-id r, /etc/machine-id r,
/etc/sv/ r, /etc/sv/ r,
/etc/sv/** rw, /etc/sv/** rw,
/etc/runit/ r, /etc/runit/ r,
/etc/runit/** rw, /etc/runit/** rw,
owner /dev/tty@{int} rw, owner /dev/tty@{int} rw,
owner /dev/console rwk, owner /dev/console rwk,
owner /dev/input/event@{int} rw, owner /dev/input/event@{int} rw,
owner /var/log/audit/** rw, owner /var/log/audit/** rw,
/var/lib/dbus/machine-id r, /var/lib/dbus/machine-id r,
owner /tmp/#@{int}* rw, owner /tmp/#@{int}* rw,
owner /tmp/*/{,s} rw, owner /tmp/*/{,s} rw,
include if exists <local/runsvdir>
} }