felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use @{sbin} for all program inside /usr/sbin.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-28 21:27:57 +02:00
parent b8f2f38c72
commit fd17a77b17
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
270 changed files with 475 additions and 475 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/_full/systemd
View file

@ -173,7 +173,7 @@ profile systemd flags=(attach_disconnected,mediate_deleted) {
# Shell based systemd unit services
# TODO: create unit profile for all of them
@{bin}/ldconfig Px -> systemd-service,
@{sbin}/ldconfig Px -> systemd-service,
@{bin}/mandb Px -> systemd-service,
@{bin}/savelog Px -> systemd-service,
@{coreutils_path} Px -> systemd-service,

6
apparmor.d/groups/_full/systemd-service
View file

@ -21,7 +21,7 @@ profile systemd-service flags=(attach_disconnected) {
capability chown,
capability fsetid,
@{bin}/ldconfig rix,
@{sbin}/ldconfig rix,
@{bin}/savelog rix,
@{bin}/systemctl rix,
@{bin}/gzip rix,
@ -32,8 +32,8 @@ profile systemd-service flags=(attach_disconnected) {
@{bin}/ifup rPx,
# shadow.service
@{bin}/pwck rPx,
@{bin}/grpck rPx,
@{sbin}/pwck rPx,
@{sbin}/grpck rPx,
@{bin}/grub-editenv rPx,
@{bin}/ibus-daemon rPx,