felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Profiles update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-03-18 16:05:36 +00:00
parent fd1dce916d
commit ea366754d7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
16 changed files with 77 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

33
apparmor.d/profiles-m-r/pass
View file

@ -41,7 +41,7 @@ profile pass @{exec_path} {
/{usr/,}bin/tty rix,
/{usr/,}bin/which rix,
/{usr/,}bin/git rPx,
/{usr/,}bin/git rCx -> git,
/{usr/,}bin/gpg{2,} rUx,
/{usr/,}bin/vim rCx -> editor,
/{usr/,}bin/wl-{copy,paste} rPx,
@ -89,6 +89,37 @@ profile pass @{exec_path} {
deny owner @{HOME}/ r,
}
profile git {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/openssl>
include <abstractions/ssl_certs>
network inet dgram,
network inet6 dgram,
network inet stream,
network inet6 stream,
network netlink raw,
/{usr/,}bin/git* mrix,
/{usr/,}@{libexec}/git-core/git* mrix,
/{usr/,}bin/gpg{2,} rUx,
/usr/share/git-core/{,**} r,
owner @{HOME}/.gitconfig r,
owner @{user_config_dirs}/git/{,*} r,
owner @{HOME}/.password-store/ rw,
owner @{HOME}/.password-store/** rwkl -> @{HOME}/.password-store/**,
owner @{HOME}/@{XDG_PROJECTS_DIR}/**/*-store/ rw,
owner @{HOME}/@{XDG_PROJECTS_DIR}/**/*-store/** rwkl -> @{HOME}/@{XDG_PROJECTS_DIR}/**/*-store/**,
owner @{user_config_dirs}/password-store/ rw,
owner @{user_config_dirs}/password-store/** rwkl -> @{user_config_dirs}/password-store/**,
}
include if exists <usr/pass.d>
include if exists <local/pass>
}