felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-04-24 18:58:58 +01:00
parent 4523a61425
commit ef687d7149
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
8 changed files with 17 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/profiles-a-f/firewalld
View file

@ -34,6 +34,7 @@ profile firewalld @{exec_path} {
/{usr/,}bin/false rix,
/usr/share/libalternatives/ r,
/usr/share/libalternatives/ebtables*/{,*} r,
/usr/share/libalternatives/ip{,4,6}tables*/{,*} r,
/etc/firewalld/{,**} r,
@ -41,12 +42,15 @@ profile firewalld @{exec_path} {
/etc/iproute2/group r,
/etc/iproute2/rt_realms r,
/var/lib/ebtables/lock rwk,
/var/log/firewalld rw,
@{run}/firewalld/{,*} rw,
@{run}/xtables.lock rwk,
@{PROC}/sys/kernel/modprobe r,
@{PROC}/sys/net/ipv{4,6}/ip_forward rw,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pids}/net/ip_tables_names r,