felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use @{sbin} for all program inside /usr/sbin.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-28 21:27:57 +02:00
parent b8f2f38c72
commit fd17a77b17
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
270 changed files with 475 additions and 475 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/groups/network/openvpn
View file

@ -22,7 +22,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/openvpn
@{exec_path} = @{sbin}/openvpn
profile openvpn @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
@ -61,7 +61,7 @@ profile openvpn @{exec_path} flags=(attach_disconnected) {
@{run}/openvpn/*.{pid,status} rw,
@{run}/systemd/journal/dev-log r,
@{bin}/ip rix,
@{sbin}/ip rix,
@{bin}/systemd-ask-password rPx,
@{lib}/nm-openvpn-service-openvpn-helper rPx,
/etc/openvpn/force-user-traffic-via-vpn.sh rCx -> force-user-traffic-via-vpn,
@ -83,9 +83,9 @@ profile openvpn @{exec_path} flags=(attach_disconnected) {
@{sh_path} rix,
@{bin}/cut rix,
@{bin}/ip rix,
@{sbin}/ip rix,
@{bin}/which{,.debianutils} rix,
@{bin}/xtables-nft-multi rix,
@{sbin}/xtables-nft-multi rix,
/etc/iproute2/rt_tables r,
/etc/iproute2/rt_tables.d/{,*} r,
@ -110,8 +110,8 @@ profile openvpn @{exec_path} flags=(attach_disconnected) {
@{bin}/{,e}grep rix,
@{bin}/cut rix,
@{bin}/env rix,
@{bin}/ip rix,
@{bin}/nft rix,
@{sbin}/ip rix,
@{sbin}/nft rix,
@{bin}/sed rix,
/etc/iproute2/rt_realms r,