felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): minor improvments.

Browse source
This commit is contained in:
Alexandre Pujol 2022-06-13 22:13:17 +01:00
parent 7c2e92ba03
commit f71c0e41f8
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 85 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

51
apparmor.d/groups/systemd/systemd-analyze
View file

@ -28,38 +28,35 @@ profile systemd-analyze @{exec_path} {
/{usr/,}bin/more rPx -> child-pager,
/{usr/,}bin/man rPx,
/usr/ r,
/{usr/,}lib/systemd/** r,
/etc/default/locale r,
/etc/locale.conf r,
/etc/systemd/** r,
owner /tmp/systemd-temporary-*/ rw,
@{run}/systemd/system/ r,
@{run}/systemd/userdb/io.systemd.DynamicUser w,
@{run}/udev/data/* r,
@{run}/udev/tags/systemd/ r,
@{sys}/devices/**/uevent r,
@{sys}/firmware/acpi/tables/FPDT r,
@{sys}/fs/cgroup/{,**} r,
@{sys}/fs/cgroup/{systemd,unified}/**/cgroup.procs rw,
@{sys}/fs/cgroup/unified/**/init.scope/ rw,
@{sys}/module/**/uevent r,
@{sys}/firmware/efi/efivars/LoaderTimeInitUSec-@{uuid} r,
@{sys}/firmware/efi/efivars/LoaderTimeExecUSec-@{uuid} r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/comm r,
@{PROC}/swaps r,
# For systemd-analyze cat-config
/etc/systemd/** r,
/{usr/,}lib/systemd/** r,
@{sys}/fs/cgroup/{,**} r,
@{sys}/fs/cgroup/{systemd,unified}/**/cgroup.procs rw,
@{sys}/fs/cgroup/unified/**/init.scope/ rw,
@{sys}/firmware/acpi/tables/FPDT r,
@{sys}/module/**/uevent r,
@{sys}/devices/**/uevent r,
@{run}/udev/data/* r,
@{run}/udev/tags/systemd/ r,
@{run}/systemd/system/ r,
@{run}/systemd/userdb/io.systemd.DynamicUser w,
owner /tmp/systemd-temporary-*/ rw,
/usr/ r,
/etc/default/locale r,
/etc/locale.conf r,
@{sys}/firmware/efi/efivars/LoaderTimeInitUSec-@{uuid} r,
@{sys}/firmware/efi/efivars/LoaderTimeExecUSec-@{uuid} r,
/dev/tty rw,
/dev/pts/1 rw,