felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use @{sbin} for all program inside /usr/sbin.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-28 21:27:57 +02:00
parent b8f2f38c72
commit fd17a77b17
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
270 changed files with 475 additions and 475 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/filesystem/fsck.btrfs
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/fsck.btrfs
@{exec_path} = @{sbin}/fsck.btrfs
profile fsck.btrfs @{exec_path} {
include <abstractions/base>

2
apparmor.d/groups/filesystem/fsck.fat
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/fsck.fat @{bin}/fsck.msdos @{bin}/fsck.vfat @{bin}/dosfsck
@{exec_path} = @{sbin}/fsck.fat @{sbin}/fsck.msdos @{sbin}/fsck.vfat @{sbin}/dosfsck
profile fsck.fat @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/lvm
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/lvm
@{exec_path} = @{sbin}/lvm
profile lvm @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/bus-system>

2
apparmor.d/groups/filesystem/lvmconfig
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/lvmconfig
@{exec_path} = @{sbin}/lvmconfig
profile lvmconfig @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>

2
apparmor.d/groups/filesystem/lvmdump
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/lvmdump
@{exec_path} = @{sbin}/lvmdump
profile lvmdump @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>

2
apparmor.d/groups/filesystem/lvmpolld
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/lvmpolld
@{exec_path} = @{sbin}/lvmpolld
profile lvmpolld @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>

4
apparmor.d/groups/filesystem/mke2fs
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/mke2fs @{bin}/mkfs.ext2 @{bin}/mkfs.ext3 @{bin}/mkfs.ext4
@{exec_path} = @{sbin}/mke2fs @{sbin}/mkfs.ext2 @{sbin}/mkfs.ext3 @{sbin}/mkfs.ext4
profile mke2fs @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>
@ -19,7 +19,7 @@ profile mke2fs @{exec_path} {
# To check for badblocks
@{sh_path} rix,
@{bin}/badblocks rPx,
@{sbin}/badblocks rPx,
/usr/share/file/misc/magic.mgc r,

2
apparmor.d/groups/filesystem/mkfs-btrfs
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/mkfs.btrfs
@{exec_path} = @{sbin}/mkfs.btrfs
profile mkfs-btrfs @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/mkswap
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/mkswap
@{exec_path} = @{sbin}/mkswap
profile mkswap @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/mount-cifs
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/mount.cifs
@{exec_path} = @{sbin}/mount.cifs
profile mount-cifs @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>

2
apparmor.d/groups/filesystem/ntfsclone
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/ntfsclone
@{exec_path} = @{sbin}/ntfsclone
profile ntfsclone @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/ntfscp
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/ntfscp
@{exec_path} = @{sbin}/ntfscp
profile ntfscp @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/ntfslabel
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/ntfslabel
@{exec_path} = @{sbin}/ntfslabel
profile ntfslabel @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/ntfsresize
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/ntfsresize
@{exec_path} = @{sbin}/ntfsresize
profile ntfsresize @{exec_path} {
include <abstractions/base>
include <abstractions/disks-write>

2
apparmor.d/groups/filesystem/ntfsundelete
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/ntfsundelete
@{exec_path} = @{sbin}/ntfsundelete
profile ntfsundelete @{exec_path} {
include <abstractions/base>
include <abstractions/disks-read>

16
apparmor.d/groups/filesystem/udisksd
View file

@ -73,18 +73,18 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
@{sh_path} rix,
@{bin}/umount rix,
@{bin}/dmidecode rPx,
@{bin}/dumpe2fs rPx,
@{sbin}/dmidecode rPx,
@{sbin}/dumpe2fs rPx,
@{bin}/eject rPx,
@{bin}/fsck.fat rPx,
@{bin}/lvm rPUx,
@{bin}/mke2fs rPx,
@{bin}/mkfs.* rPx,
@{sbin}/fsck.fat rPx,
@{sbin}/lvm rPUx,
@{sbin}/mke2fs rPx,
@{sbin}/mkfs.* rPx,
@{bin}/mount.exfat-fuse rPUx,
@{bin}/ntfs-3g rPx,
@{bin}/ntfsfix rPx,
@{bin}/sfdisk rPx,
@{bin}/sgdisk rPx,
@{sbin}/sfdisk rPx,
@{sbin}/sgdisk rPx,
@{bin}/systemctl rCx -> systemctl,
@{bin}/systemd-escape rPx,
@{bin}/xfs_* rPUx,

2
apparmor.d/groups/filesystem/umount.udisks2
View file

@ -7,7 +7,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/umount.udisks2
@{exec_path} = @{sbin}/umount.udisks2
profile umount.udisks2 @{exec_path} flags=(complain) {
include <abstractions/base>