feat(profile): use @{sbin} for all program inside /usr/sbin.

2025-04-28 21:27:57 +02:00 · 2025-04-28 21:27:57 +02:00 · fd17a77b17
commit fd17a77b17
parent b8f2f38c72
270 changed files with 475 additions and 475 deletions
--- a/apparmor.d/groups/whonix/pam-info
+++ b/apparmor.d/groups/whonix/pam-info
@ -14,7 +14,7 @@ profile pam-info @{exec_path} {
  @{exec_path} mr,

  @{sh_path}          rix,
-  @{bin}/faillock     rix,
+  @{sbin}/faillock    rix,
  @{bin}/grep         rix,
  @{bin}/str_replace  rix,
  @{bin}/wc           rix,
--- a/apparmor.d/groups/whonix/whonix-firewalld
+++ b/apparmor.d/groups/whonix/whonix-firewalld
@ -29,7 +29,7 @@ profile whonix-firewalld @{exec_path} {
  @{bin}/rm                 rix,
  @{bin}/touch              rix,
  @{bin}/whonix-*-firewall  rix,
-  @{bin}/xtables-nft-multi  rix,
+  @{sbin}/xtables-nft-multi rix,

  @{bin}/qubesdb-read      rPUx,
  @{bin}/qubesdb-cmd       rPUx,