parent
ac75f2ee5c
commit
fa4d065f52
7 changed files with 36 additions and 42 deletions
|
|
@ -17,6 +17,7 @@ profile login @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
capability audit_write,
|
||||
capability chown,
|
||||
capability dac_override,
|
||||
capability dac_read_search,
|
||||
capability fowner,
|
||||
capability fsetid,
|
||||
|
|
@ -29,7 +30,7 @@ profile login @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
network netlink raw,
|
||||
|
||||
signal (send) set=(hup,term),
|
||||
signal (send) set=(hup term),
|
||||
|
||||
ptrace read,
|
||||
|
||||
|
|
@ -54,16 +55,17 @@ profile login @{exec_path} flags=(attach_disconnected) {
|
|||
|
||||
/var/log/btmp{,.[0-9]*} r,
|
||||
|
||||
owner @{user_cache_dirs}/motd.legal-displayed rw,
|
||||
|
||||
@{run}/dbus/system_bus_socket rw,
|
||||
@{run}/faillock/* rwk,
|
||||
@{run}/motd.dynamic{,.new} rw,
|
||||
@{run}/systemd/sessions/*.ref rw,
|
||||
|
||||
owner @{PROC}/@{pid}/uid_map r,
|
||||
owner @{PROC}/@{pid}/loginuid rw,
|
||||
@{PROC}/@{pids}/cgroup r,
|
||||
@{PROC}/1/limits r,
|
||||
|
||||
owner @{user_cache_dirs}/motd.legal-displayed rw,
|
||||
owner @{PROC}/@{pid}/loginuid rw,
|
||||
owner @{PROC}/@{pid}/uid_map r,
|
||||
|
||||
/dev/tty[0-9]* rw,
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue