felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve netplan generator.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-01 20:40:26 +02:00
parent 97ddc0de63
commit fa317ad91b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/groups/network/netplan-generate
View file

@ -21,9 +21,11 @@ profile netplan-generate @{exec_path} flags=(attach_disconnected) {
/etc/netplan/{,*} r, /etc/netplan/{,*} r,
@{run}/NetworkManager/ rw,
@{run}/NetworkManager/conf.d/ rw,
@{run}/NetworkManager/conf.d/@{int}-globally-managed-devices.conf rw, @{run}/NetworkManager/conf.d/@{int}-globally-managed-devices.conf rw,
@{run}/NetworkManager/conf.d/@{int}-globally-managed-devices.conf.@{rand6} rw, @{run}/NetworkManager/conf.d/@{int}-globally-managed-devices.conf.@{rand6} rw,
@{run}/NetworkManager/system-connections/ r, @{run}/NetworkManager/system-connections/ rw,
@{run}/NetworkManager/system-connections/* rw, @{run}/NetworkManager/system-connections/* rw,
@{run}/systemd/generator/multi-user.target.wants/ w, @{run}/systemd/generator/multi-user.target.wants/ w,
@ -43,13 +45,13 @@ profile netplan-generate @{exec_path} flags=(attach_disconnected) {
@{run}/udev/rules.d/ rw, @{run}/udev/rules.d/ rw,
@{run}/udev/rules.d/@{int}-netplan{,-*}.rules{,.@{rand6}} rw, @{run}/udev/rules.d/@{int}-netplan{,-*}.rules{,.@{rand6}} rw,
@{sys}/devices/**/net/*/address r,
@{run}/netplan/ r, @{run}/netplan/ r,
@{run}/udev/rules.d/ r, @{run}/udev/rules.d/ r,
@{run}/udev/rules.d/@{int}-netplan{,-*}.rules{,.@{rand6}} rw, @{run}/udev/rules.d/@{int}-netplan{,-*}.rules{,.@{rand6}} rw,
@{sys}/devices/**/net/*/address r,
profile systemctl { profile systemctl {
include <abstractions/base> include <abstractions/base>
include <abstractions/app/systemctl> include <abstractions/app/systemctl>