felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (5)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:34:42 +01:00
parent 43b0f09b65
commit fcedbbfd95
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
122 changed files with 873 additions and 876 deletions
Download patch file Download diff file Expand all files Collapse all files

34
apparmor.d/profiles-g-l/initd-kexec-load
View file

@ -11,23 +11,23 @@ profile initd-kexec-load @{exec_path} {
include <abstractions/base>
@{exec_path} r,
/{usr/,}bin/{,ba,da}sh rix,
@{bin}/{,ba,da}sh rix,
/{usr/,}bin/{,e}grep rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/{m,g,}awk rix,
/{usr/,}bin/cut rix,
/{usr/,}bin/tail rix,
/{usr/,}bin/sed rix,
/{usr/,}bin/head rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/readlink rix,
/{usr/,}bin/tput rix,
@{bin}/{,e}grep rix,
@{bin}/cat rix,
@{bin}/{m,g,}awk rix,
@{bin}/cut rix,
@{bin}/tail rix,
@{bin}/sed rix,
@{bin}/head rix,
@{bin}/rm rix,
@{bin}/readlink rix,
@{bin}/tput rix,
/{usr/,}{s,}bin/kexec rPx,
@{bin}/kexec rPx,
/{usr/,}bin/run-parts rCx -> run-parts,
/{usr/,}bin/systemctl rCx -> systemctl,
@{bin}/run-parts rCx -> run-parts,
@{bin}/systemctl rCx -> systemctl,
/no-kexec-reboot rw,
@ -43,7 +43,7 @@ profile initd-kexec-load @{exec_path} {
profile run-parts {
include <abstractions/base>
/{usr/,}bin/run-parts mr,
@{bin}/run-parts mr,
/etc/default/kexec.d/ r,
@ -57,9 +57,9 @@ profile initd-kexec-load @{exec_path} {
ptrace (read),
/{usr/,}bin/systemctl mr,
@{bin}/systemctl mr,
/{usr/,}bin/systemd-tty-ask-password-agent rix,
@{bin}/systemd-tty-ask-password-agent rix,
owner @{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/fd/ r,