felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use @{sbin} for all program inside /usr/sbin.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-28 21:27:57 +02:00
parent b8f2f38c72
commit fd17a77b17
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
270 changed files with 475 additions and 475 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/pacman/mkinitcpio
View file

@ -28,11 +28,11 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
@{bin}/bsdtar rix,
@{bin}/fc-match rix,
@{bin}/findmnt rPx,
@{bin}/fsck rix,
@{sbin}/fsck rix,
@{bin}/getent rix,
@{bin}/gzip rix,
@{bin}/hexdump rix,
@{bin}/ldconfig rix,
@{sbin}/ldconfig rix,
@{bin}/ldd rix,
@{bin}/loadkeys rix,
@{bin}/objcopy rix,
@ -45,7 +45,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) {
@{bin}/{depmod,insmod} rPx,
@{bin}/{kmod,lsmod} rPx,
@{bin}/{modinfo,rmmod} rPx,
@{bin}/modprobe rPx,
@{sbin}/modprobe rPx,
@{bin}/plymouth rPx,
@{bin}/plymouth-set-default-theme rPx,
@{bin}/sbctl rPx,

18
apparmor.d/groups/pacman/pacman
View file

@ -69,35 +69,35 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
@{bin}/ghc-pkg-@{version} rix,
@{bin}/gio-querymodules rPx,
@{bin}/glib-compile-schemas rPx,
@{bin}/groupadd rPx,
@{sbin}/groupadd rPx,
@{bin}/gtk-query-immodules-{2,3}.0 rPx,
@{bin}/gtk{,4}-update-icon-cache rPx,
@{bin}/iconvconfig rix,
@{sbin}/iconvconfig rix,
@{bin}/install-catalog rPx,
@{bin}/install-info rPx,
@{bin}/iscsi-iname rix,
@{bin}/journalctl rPx,
@{bin}/killall rix,
@{bin}/ldconfig rix,
@{bin}/locale-gen rPx,
@{sbin}/ldconfig rix,
@{sbin}/locale-gen rPx,
@{bin}/mkinitcpio rPx,
@{bin}/needrestart rPx,
@{sbin}/needrestart rPx,
@{bin}/pacdiff rPx,
@{bin}/pacman-key rPx,
@{bin}/pkgfile rPUx,
@{bin}/pkill rix,
@{bin}/rsync rix,
@{bin}/sbctl rPx,
@{bin}/setcap rix,
@{sbin}/setcap rix,
@{bin}/setfacl rix,
@{bin}/sysctl rPx,
@{sbin}/sysctl rPx,
@{bin}/systemctl rCx -> systemctl,
@{bin}/systemd-* rPx,
@{bin}/tput rix,
@{bin}/update-ca-trust rPx,
@{bin}/update-desktop-database rPx,
@{bin}/update-grub rPx,
@{bin}/update-mime-database rPx,
@{sbin}/update-grub rPx,
@{sbin}/update-mime-database rPx,
@{bin}/vercmp rix,
@{bin}/which rix,
@{bin}/xmlcatalog rix,

2
apparmor.d/groups/pacman/pacman-hook-depmod
View file

@ -16,7 +16,7 @@ profile pacman-hook-depmod @{exec_path} {
@{bin}/basename rix,
@{bin}/bash rix,
@{bin}/depmod rPx,
@{sbin}/depmod rPx,
@{bin}/kmod rPx,
@{bin}/rm rix,
@{bin}/rmdir rix,

2
apparmor.d/groups/pacman/pacman-hook-dkms
View file

@ -19,7 +19,7 @@ profile pacman-hook-dkms @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{sh_path} rix,
@{bin}/dkms rPx,
@{sbin}/dkms rPx,
@{bin}/kmod rPx,
@{bin}/nproc rix,