felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-11-11 22:02:47 +00:00
parent 02115a194b
commit f0a2cb3897
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
9 changed files with 26 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/groups/systemd/systemd-binfmt
View file

@ -9,11 +9,10 @@ include <tunables/global>
@{exec_path} = @{lib}/systemd/systemd-binfmt
profile systemd-binfmt @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/systemd-common>
capability net_admin,
ptrace (read) peer=unconfined,
@{exec_path} mr,
@{bin}/* r,
@ -23,12 +22,8 @@ profile systemd-binfmt @{exec_path} flags=(attach_disconnected) {
@{run}/binfmt.d/{,*.conf} r,
/usr/lib/binfmt.d/{,*.conf} r,
@{PROC}/1/environ r,
@{PROC}/cmdline r,
@{PROC}/sys/fs/binfmt_misc/register w,
@{PROC}/sys/fs/binfmt_misc/status w,
@{PROC}/sys/kernel/osrelease r,
owner @{PROC}/@{pid}/stat r,
@{PROC}/sys/fs/binfmt_misc/register w,
@{PROC}/sys/fs/binfmt_misc/status w,
/dev/tty@{int} rw,
/dev/pts/@{int} rw,