felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(opensuse): final opensuse integration.

Browse source
This commit is contained in:
Alexandre Pujol 2023-02-04 23:55:14 +00:00
parent 609097ef27
commit e93e80ee20
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
20 changed files with 80 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

21
apparmor.d/profiles-g-l/logrotate
View file

@ -29,21 +29,22 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
/{usr/,}{s,}bin/ r,
/{usr/,}{s,}bin/invoke-rc.d rix,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/grep rix,
/{usr/,}bin/shred rix,
/{usr/,}bin/gzip rix,
/{usr/,}bin/kill rix,
/{usr/,}bin/ls rix,
/{usr/,}bin/gzip rix,
/{usr/,}bin/shred rix,
/{usr/,}bin/xz rix,
/{usr/,}bin/zstd rix,
/{usr/,}{s,}bin/invoke-rc.d rix,
/{usr/,}lib/rsyslog/rsyslog-rotate rix,
/{usr/,}bin/fail2ban-client rPx,
/{usr/,}bin/systemd-tty-ask-password-agent rPx,
/{usr/,}bin/my_print_defaults rPUx,
/{usr/,}bin/mysqladmin rPUx,
/{usr/,}bin/systemd-tty-ask-password-agent rPx,
/{usr/,}lib/php/php[7-8].[3-4]-fpm-reopenlogs rPUx,
# no new privs
@ -59,22 +60,20 @@ profile logrotate @{exec_path} flags=(attach_disconnected) {
@{PROC}/cmdline r,
@{PROC}/sys/kernel/osrelease r,
owner @{run}/systemd/private rw,
/etc/ r,
/etc/logrotate.conf rk,
/etc/logrotate.d/ r,
/etc/logrotate.d/* rk,
/var/lib/logrotate/status rwk,
/var/lib/logrotate/status.tmp rw,
/var/lib/logrotate.status rwk,
/var/lib/logrotate.status.tmp rw,
/ r,
/var/log{,.hdd}/ r,
/var/log{,.hdd}/** rw,
/var/lib/{,misc/}logrotate/status rwk,
/var/lib/{,misc/}logrotate/status.tmp rw,
/var/lib/{,misc/}logrotate.status rwk,
/var/lib/{,misc/}logrotate.status.tmp rw,
@{run}/systemd/private rw,
@{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r,