felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-02-11 19:03:01 +00:00
parent 2242c2185a
commit fbd5996531
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 70 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/network/NetworkManager
View file

@ -35,6 +35,8 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
network netlink raw,
network packet dgram,
signal (send) set=(term) peer=dnsmasq,
dbus (send,receive) bus=system path=/org/freedesktop/NetworkManager{,/**}
interface=org.freedesktop.{DBus.Properties,DBus.Introspectable,NetworkManager*},
@ -88,8 +90,10 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/nft rix,
/{usr/,}bin/dnsmasq rPx,
/{usr/,}bin/kmod rPx,
/{usr/,}bin/resolvconf rPx,
/{usr/,}bin/systemctl rPx -> child-systemctl,
@{libexec}/{,NetworkManager/}nm-dhcp-helper rPx,

3
apparmor.d/groups/network/tailscaled
View file

@ -30,8 +30,9 @@ profile tailscaled @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
/{usr/,}bin/ip rix,
/{usr/,}{s,}bin/xtables-nft-multi rix,
/{usr/,}bin/ip rix,
/{usr/,}bin/resolvectl rPx,
/{usr/,}bin/systemctl rCx -> systemctl,