felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update dkms (#663)

Browse source
This commit is contained in:
curiosityseeker 2025-02-09 21:07:43 +01:00 • committed by GitHub
parent 5ea339803a
commit e5aad04be4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/profiles-a-f/dkms
View file

@ -28,11 +28,14 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
@{coreutils_path} rix, @{coreutils_path} rix,
@{bin}/as rix, @{bin}/as rix,
@{bin}/bc rix, @{bin}/bc rix,
@{bin}/clang-@{version} rix,
@{bin}/gcc rix, @{bin}/gcc rix,
@{bin}/getconf rix, @{bin}/getconf rix,
@{bin}/kill rix, @{bin}/kill rix,
@{bin}/kmod rCx -> kmod, @{bin}/kmod rCx -> kmod,
@{bin}/ld rix, @{bin}/ld rix,
@{bin}/ld.lld rix,
@{bin}/llvm-objcopy rix,
@{bin}/lsb_release rPx -> lsb_release, @{bin}/lsb_release rPx -> lsb_release,
@{bin}/make rix, @{bin}/make rix,
@{bin}/objcopy rix, @{bin}/objcopy rix,
@ -47,10 +50,14 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
@{lib}/linux-kbuild-*/scripts/** rix, @{lib}/linux-kbuild-*/scripts/** rix,
@{lib}/linux-kbuild-*/tools/objtool/objtool rix, @{lib}/linux-kbuild-*/tools/objtool/objtool rix,
@{lib}/llvm-[0-9]*/bin/clang rix, @{lib}/llvm-[0-9]*/bin/clang rix,
@{lib}/modules/*/build/arch/x86/** rix,
@{lib}/modules/*/build/include/** rix,
@{lib}/modules/*/build/scripts/** rix, @{lib}/modules/*/build/scripts/** rix,
@{lib}/modules/*/build/tools/** rix, @{lib}/modules/*/build/tools/** rix,
@{lib}/os-release rix,
/var/lib/dkms/**/build/* rix, /var/lib/dkms/**/build/* rix,
/var/lib/dkms/vboxhost/*/build/** rw,
/var/lib/dkms/**/configure rix, /var/lib/dkms/**/configure rix,
/var/lib/dkms/**/dkms.postbuild rix, /var/lib/dkms/**/dkms.postbuild rix,
@ -94,9 +101,13 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
owner @{tmp}/sh-thd.* rw, owner @{tmp}/sh-thd.* rw,
owner @{tmp}/tmp.* rw, owner @{tmp}/tmp.* rw,
@{PROC}/cpuinfo r,
@{PROC}/sys/kernel/osrelease r, @{PROC}/sys/kernel/osrelease r,
@{PROC}/sys/vm/overcommit_memory r,
owner @{PROC}/@{pid}/fd/ r, owner @{PROC}/@{pid}/fd/ r,
/dev/pts/@{int} rw,
profile kmod { profile kmod {
include <abstractions/base> include <abstractions/base>
include <abstractions/app/kmod> include <abstractions/app/kmod>