felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (5)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:34:42 +01:00
parent 43b0f09b65
commit fcedbbfd95
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
122 changed files with 873 additions and 876 deletions
Download patch file Download diff file Expand all files Collapse all files

82
apparmor.d/profiles-g-l/gpartedbin
View file

@ -7,9 +7,9 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}{s,}bin/gpartedbin
@{exec_path} += @{libexec}/gpartedbin
@{exec_path} += @{libexec}/gparted/gpartedbin
@{exec_path} = @{bin}/gpartedbin
@{exec_path} += @{lib}/gpartedbin
@{exec_path} += @{lib}/gparted/gpartedbin
profile gpartedbin @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
@ -30,45 +30,45 @@ profile gpartedbin @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/{,ba,da}sh rix,
@{bin}/{,ba,da}sh rix,
/{usr/,}{s,}bin/blkid rPx,
/{usr/,}{s,}bin/dmidecode rPx,
/{usr/,}{s,}bin/hdparm rPx,
/{usr/,}bin/kmod rPx,
@{bin}/blkid rPx,
@{bin}/dmidecode rPx,
@{bin}/hdparm rPx,
@{bin}/kmod rPx,
/{usr/,}bin/mount rCx -> mount,
/{usr/,}bin/udevadm rCx -> udevadm,
/{usr/,}bin/umount rCx -> umount,
@{bin}/mount rCx -> mount,
@{bin}/udevadm rCx -> udevadm,
@{bin}/umount rCx -> umount,
/{usr/,}{s,}bin/dmraid rPUx,
/{usr/,}{s,}bin/dmsetup rPUx,
/{usr/,}{s,}bin/dumpe2fs rPx,
/{usr/,}{s,}bin/e2fsck rPx,
/{usr/,}{s,}bin/e2image rPx,
/{usr/,}{s,}bin/fsck.btrfs rPx,
/{usr/,}{s,}bin/fsck.fat rPx,
/{usr/,}{s,}bin/lvm rPUx,
/{usr/,}{s,}bin/mke2fs rPx,
/{usr/,}{s,}bin/mkntfs rPx,
/{usr/,}{s,}bin/mkswap rPx,
/{usr/,}{s,}bin/ntfslabel rPx,
/{usr/,}{s,}bin/ntfsresize rPx,
/{usr/,}{s,}bin/resize2fs rPx,
/{usr/,}{s,}bin/swaplabel rPx,
/{usr/,}{s,}bin/swapoff rPx,
/{usr/,}{s,}bin/swapon rPx,
/{usr/,}{s,}bin/tune2fs rPx,
/{usr/,}bin/btrfs rPx,
/{usr/,}bin/btrfstune rPx,
/{usr/,}bin/mdadm rPUx,
/{usr/,}bin/mkfs.* rPx,
/{usr/,}bin/mtools rPx,
/{usr/,}bin/ntfsinfo rPx,
/{usr/,}bin/xfs_io rPUx,
@{bin}/btrfs rPx,
@{bin}/btrfstune rPx,
@{bin}/dmraid rPUx,
@{bin}/dmsetup rPUx,
@{bin}/dumpe2fs rPx,
@{bin}/e2fsck rPx,
@{bin}/e2image rPx,
@{bin}/fsck.btrfs rPx,
@{bin}/fsck.fat rPx,
@{bin}/lvm rPUx,
@{bin}/mdadm rPUx,
@{bin}/mke2fs rPx,
@{bin}/mkfs.* rPx,
@{bin}/mkntfs rPx,
@{bin}/mkswap rPx,
@{bin}/mtools rPx,
@{bin}/ntfsinfo rPx,
@{bin}/ntfslabel rPx,
@{bin}/ntfsresize rPx,
@{bin}/resize2fs rPx,
@{bin}/swaplabel rPx,
@{bin}/swapoff rPx,
@{bin}/swapon rPx,
@{bin}/tune2fs rPx,
@{bin}/xfs_io rPUx,
/{usr/,}bin/xdg-open rCx -> child-open,
/{usr/,}lib/@{multiarch}/glib-[0-9]*/gio-launch-desktop rCx -> child-open,
@{bin}/xdg-open rCx -> child-open,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rCx -> child-open,
@{HOME}/.Xauthority r,
owner @{HOME}/*.htm w,
@ -98,7 +98,7 @@ profile gpartedbin @{exec_path} {
mount /dev/{s,v}d[a-z]*[0-9]* -> @{MOUNTS}/,
mount /dev/{s,v}d[a-z]*[0-9]* -> @{MOUNTS}/*/,
/{usr/,}bin/mount mr,
@{bin}/mount mr,
@{sys}/devices/pci[0-9]*/**/block/{s,v}d[a-z]/ r,
@{sys}/devices/pci[0-9]*/**/block/{s,v}d[a-z]/dev r,
@ -121,7 +121,7 @@ profile gpartedbin @{exec_path} {
umount @{MOUNTS}/,
umount @{MOUNTS}/*/,
/{usr/,}bin/umount mr,
@{bin}/umount mr,
owner @{run}/mount/ rw,
owner @{run}/mount/utab{,.*} rw,
@ -137,7 +137,7 @@ profile gpartedbin @{exec_path} {
ptrace (read),
/{usr/,}bin/udevadm mr,
@{bin}/udevadm mr,
/etc/udev/udev.conf r,