felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): use @{sbin} for all program inside /usr/sbin.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-28 21:27:57 +02:00
parent b8f2f38c72
commit fd17a77b17
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
270 changed files with 475 additions and 475 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/profiles-m-r/mkinitramfs
View file

@ -8,7 +8,7 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/mkinitramfs
@{exec_path} = @{sbin}/mkinitramfs
profile mkinitramfs @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>
@ -58,7 +58,7 @@ profile mkinitramfs @{exec_path} {
@{bin}/find rCx -> find,
@{bin}/kmod rCx -> kmod,
@{bin}/ldconfig rCx -> ldconfig,
@{sbin}/ldconfig rCx -> ldconfig,
@{bin}/ldd rCx -> ldd,
@{lib}/@{multiarch}/ld-linux-*so* rCx -> ldd,
@{lib}/ld-linux.so* rCx -> ldd,
@ -130,10 +130,10 @@ profile mkinitramfs @{exec_path} {
capability sys_chroot,
@{bin}/ldconfig mr,
@{sbin}/ldconfig mr,
@{sh_path} rix,
@{bin}/ldconfig.real rix,
@{sbin}/ldconfig.real rix,
owner /var/tmp/mkinitramfs_@{rand6}/etc/ld.so.conf r,
owner /var/tmp/mkinitramfs_@{rand6}/etc/ld.so.conf.d/{,*.conf} r,