felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Read-only root compatibility (#86)

Browse source 
* Read-only root compatibility

* remove complain

Co-authored-by: nobodysu <nobodysu@users.noreply.github.com>
This commit is contained in:
nobody43 2022-10-18 18:23:52 +00:00 • committed by GitHub
parent 5fdbc2d00e
commit f94faf697e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
13 changed files with 26 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/network/NetworkManager
View file

@ -105,8 +105,8 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
/ r,
/etc/ r,
/etc/machine-id r,
/etc/resolv.conf rw,
/etc/resolv.conf.[0-9A-Z]* rw,
@{etc_rw}/resolv.conf rw,
@{etc_rw}/resolv.conf.[0-9A-Z]* rw,
/etc/network/interfaces r,
/etc/network/interfaces.d/{,*} r,

6
apparmor.d/groups/network/mullvad-daemon
View file

@ -36,8 +36,8 @@ profile mullvad-daemon @{exec_path} flags=(attach_disconnected) {
/etc/mullvad-vpn/{,*} r,
/etc/mullvad-vpn/*.json rw,
/etc/resolv.conf rw,
/etc/resolv.conf.mullvadbackup rw,
@{etc_rw}/resolv.conf rw,
@{etc_rw}/resolv.conf.mullvadbackup rw,
/var/cache/mullvad-vpn/{,*} rw,
/var/log/mullvad-vpn/{,*} rw,
@ -59,4 +59,4 @@ profile mullvad-daemon @{exec_path} flags=(attach_disconnected) {
/dev/net/tun rw,
include if exists <local/mullvad-daemon>
}
}

8
apparmor.d/groups/network/tailscaled
View file

@ -37,9 +37,9 @@ profile tailscaled @{exec_path} flags=(attach_disconnected) {
/etc/iproute2/rt_tables r,
/etc/resolv.*.conf rw,
/etc/resolv.conf rw,
/etc/resolv.conf.*.tmp rw,
@{etc_rw}/resolv.*.conf rw,
@{etc_rw}/resolv.conf rw,
@{etc_rw}/resolv.conf.*.tmp rw,
owner @{run}/tailscale/{,**} rw,
owner /var/cache/{,**} rw,
@ -80,4 +80,4 @@ profile tailscaled @{exec_path} flags=(attach_disconnected) {
}
include if exists <local/tailscaled>
}
}