felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-07-03 20:27:48 +01:00
parent 9b84ded0c2
commit f6de2fbe7a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
28 changed files with 81 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/ubuntu/apt-esm-hook
View file

@ -18,7 +18,7 @@ profile apt-esm-hook @{exec_path} {
/etc/machine-id r,
/var/cache/apt/pkgcache.bin.* rw,
/var/cache/apt/pkgcache.bin* rw,
/var/lib/ubuntu-advantage/messages/{,**} rw,
owner @{PROC}/@{pid}/fd/ r,

2
apparmor.d/groups/ubuntu/apt-esm-json-hook
View file

@ -13,5 +13,7 @@ profile apt-esm-json-hook @{exec_path} {
@{exec_path} mr,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
include if exists <local/apt-esm-json-hook>
}

19
apparmor.d/groups/ubuntu/update-manager
View file

@ -30,7 +30,7 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
dbus (send,receive) bus=system path=/org/debian/apt{,/transaction/*}
interface={org.debian{,.apt*},org.freedesktop.DBus.{Introspectable,Properties}}
member={CommitPackages,Run,PropertyChanged,Introspect,Set,GetAll},
member={CommitPackages,Run,PropertyChanged,Introspect,Set,GetAll,UpdateCache},
dbus send bus=system path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
@ -54,13 +54,14 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
/{usr/,}bin/dpkg rPx -> child-dpkg,
/{usr/,}bin/hwe-support-status rPx,
/{usr/,}bin/ischroot rix,
/{usr/,}bin/lsb_release rPx -> lsb_release,
/{usr/,}bin/snap rPUx,
/{usr/,}bin/uname rix,
/{usr/,}lib/apt/methods/http{,s} rPx,
/{usr/,}bin/dpkg rPx -> child-dpkg,
/{usr/,}bin/hwe-support-status rPx,
/{usr/,}bin/ischroot rix,
/{usr/,}bin/lsb_release rPx -> lsb_release,
/{usr/,}bin/snap rPUx,
/{usr/,}bin/software-properties-gtk rPx,
/{usr/,}bin/uname rix,
/{usr/,}lib/apt/methods/http{,s} rPx,
/usr/share/distro-info/{,**} r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
@ -70,6 +71,7 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
/usr/share/update-manager/{,**} r,
/usr/share/X11/{,**} r,
/etc/gnome/defaults.list r,
/etc/machine-id r,
/etc/update-manager/{,**} r,
@ -82,6 +84,7 @@ profile update-manager @{exec_path} flags=(attach_disconnected) {
/var/lib/update-manager/{,**} rw,
owner @{user_cache_dirs}/update-manager-core/{,**} rw,
owner @{user_share_dirs}/gvfs-metadata/{,*} r,
owner @{run}/user/@{uid}/wayland-[0-9]* rw,