felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (5)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:34:42 +01:00
parent 43b0f09b65
commit fcedbbfd95
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
122 changed files with 873 additions and 876 deletions
Download patch file Download diff file Expand all files Collapse all files

24
apparmor.d/profiles-g-l/initd-kmod
View file

@ -11,18 +11,18 @@ profile initd-kmod @{exec_path} {
include <abstractions/base>
@{exec_path} r,
/{usr/,}bin/{,ba,da}sh rix,
@{bin}/{,ba,da}sh rix,
/{usr/,}bin/readlink rix,
/{usr/,}bin/tput rix,
/{usr/,}bin/id rix,
/{usr/,}bin/echo rix,
/{usr/,}bin/{,e}grep rix,
@{bin}/readlink rix,
@{bin}/tput rix,
@{bin}/id rix,
@{bin}/echo rix,
@{bin}/{,e}grep rix,
/{usr/,}bin/kmod rPx,
@{bin}/kmod rPx,
/{usr/,}bin/run-parts rCx -> run-parts,
/{usr/,}bin/systemctl rCx -> systemctl,
@{bin}/run-parts rCx -> run-parts,
@{bin}/systemctl rCx -> systemctl,
/etc/modules-load.d/*.conf r,
/etc/modules r,
@ -31,7 +31,7 @@ profile initd-kmod @{exec_path} {
profile run-parts {
include <abstractions/base>
/{usr/,}bin/run-parts mr,
@{bin}/run-parts mr,
/etc/modules-load.d/ r,
@ -44,9 +44,9 @@ profile initd-kmod @{exec_path} {
ptrace (read),
/{usr/,}bin/systemctl mr,
@{bin}/systemctl mr,
/{usr/,}bin/systemd-tty-ask-password-agent rix,
@{bin}/systemd-tty-ask-password-agent rix,
owner @{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/fd/ r,