feat(profiles): general update.

This commit is contained in:
Alexandre Pujol 2022-07-15 21:55:59 +01:00
parent 682df516bf
commit eb6c7548f5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
21 changed files with 96 additions and 62 deletions

View file

@ -29,6 +29,8 @@ profile sudo @{exec_path} {
capability sys_ptrace,
capability sys_resource,
network inet dgram,
network inet6 dgram,
network netlink raw, # PAM
ptrace (read),
@ -72,6 +74,7 @@ profile sudo @{exec_path} {
@{run}/faillock/{,*} rwk,
@{run}/resolvconf/resolv.conf r,
@{PROC}/@{pids}/cgroup r,
@{PROC}/@{pids}/fd/ r,
@{PROC}/@{pids}/stat r,
@{PROC}/1/limits r,

View file

@ -15,6 +15,8 @@ profile sulogin @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/{,ba,da}sh rux,
/etc/shadow r,
/dev/ r,