felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: update profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2022-04-26 22:05:29 +01:00
parent 84dc85b82d
commit e845a172c2
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
28 changed files with 84 additions and 96 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-m-r/mandb
View file

@ -30,7 +30,7 @@ profile mandb @{exec_path} flags=(complain) {
/usr/{,/share}/man/{,**} r,
/usr/local/{,/share/}/man/{,**} r,
/usr/share/*/man/man[0-9]*/*.[0-9]*.gz r,
/usr/share/**/man/man[0-9]*/*.[0-9]*.gz r,
include if exists <local/mandb>
}

12
apparmor.d/profiles-m-r/mount
View file

@ -14,17 +14,11 @@ profile mount @{exec_path} flags=(complain) {
include <abstractions/nameservice-strict>
capability chown,
# To be able to mount anything
# mount("/dev/sdb1", "/mnt", "ext4", 0, NULL) = -1 EPERM (Operation not permitted)
# write(2, "/mnt: permission denied.", 24) = 24
capability sys_admin,
# For NTFS mounts
capability dac_read_search,
capability setgid,
capability setuid,
capability dac_read_search,
capability sys_admin,
capability sys_rawio,
mount,