felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add initial profile for resolvectl.

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-14 22:00:52 +01:00
parent cfccb7894d
commit ebc8b29b1d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 25 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

25
apparmor.d/groups/systemd/resolvectl Normal file
View file

@ -0,0 +1,25 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/resolvectl
profile resolvectl @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/bus-system>
include <abstractions/common/systemd>
#aa:dbus talk bus=system name=org.freedesktop.resolve1 label=systemd-resolved
@{exec_path} mr,
@{pager_path} rPx -> child-pager,
include if exists <local/resolvectl>
}
# vim:syntax=apparmor