felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add some unix rules with local address.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-29 21:15:59 +00:00
parent 956c282794
commit f76051f114
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
9 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/systemd/busctl
View file

@ -17,6 +17,8 @@ profile busctl @{exec_path} {
ptrace (read),
unix (bind) type=stream addr=@@{hex}/bus/busctl/busctl,
@{exec_path} mr,
@{bin}/less rPx -> child-pager,

2
apparmor.d/groups/systemd/systemd-localed
View file

@ -17,6 +17,8 @@ profile systemd-localed @{exec_path} flags=(attach_disconnected) {
# Needed?
audit capability net_admin,
unix (bind) type=stream addr=@@{hex}/bus/systemd-localed/system,
# dbus: own bus=system name=org.freedesktop.locale1
@{exec_path} mr,

1
apparmor.d/groups/systemd/systemd-timesyncd
View file

@ -22,6 +22,7 @@ profile systemd-timesyncd @{exec_path} flags=(attach_disconnected) {
network inet6 stream,
unix (bind) type=stream addr=@@{hex}/bus/systemd-timesyn/bus-api-timesync,
unix (send, receive) type=dgram addr=none peer=(label=@{systemd}, addr=none),
# dbus: own bus=system name=org.freedesktop.timesync1