felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(profiles): use @{bin} and @{lib} in profiles (5)

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-09 14:34:42 +01:00
parent 43b0f09b65
commit fcedbbfd95
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
122 changed files with 873 additions and 876 deletions
Download patch file Download diff file Expand all files Collapse all files

20
apparmor.d/profiles-g-l/kmod
View file

@ -7,8 +7,8 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/{kmod,lsmod}
@{exec_path} += /{usr/,}{s,}bin/{depmod,insmod,lsmod,rmmod,modinfo,modprobe}
@{exec_path} = @{bin}/{kmod,lsmod}
@{exec_path} += @{bin}/{depmod,insmod,lsmod,rmmod,modinfo,modprobe}
profile kmod @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
@ -25,15 +25,15 @@ profile kmod @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
/{usr/,}{s,}bin/sysctl rPx,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/basename rix,
/{usr/,}bin/false rix,
/{usr/,}bin/id rix,
/{usr/,}bin/true rix,
@{bin}/{,ba,da}sh rix,
@{bin}/basename rix,
@{bin}/false rix,
@{bin}/id rix,
@{bin}/sysctl rPx,
@{bin}/true rix,
/{usr/,}lib/modprobe.d/{,*.conf} r,
/{usr/,}lib/modules/*/modules.* rw,
@{lib}/modprobe.d/{,*.conf} r,
@{lib}/modules/*/modules.* rw,
/etc/depmod.d/{,**} r,
/etc/modprobe.d/{,*.conf} r,