Skip to content

Commit 7c148fc

Browse files
committed
feat(profile): small profile improvments.
1 parent f814bb4 commit 7c148fc

File tree

5 files changed

+5
-3
lines changed

5 files changed

+5
-3
lines changed

apparmor.d/abstractions/bus/org.freedesktop.systemd1

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44

55
abi <abi/4.0>,
66

7-
dbus send bus=system path=/org/freedesktop/systemd1
7+
dbus send bus=system path=/org/freedesktop/systemd1{,/**}
88
interface=org.freedesktop.DBus.Properties
99
member={Get,GetAll}
1010
peer=(name=org.freedesktop.systemd1, label="@{p_systemd}"),

apparmor.d/profiles-a-f/blkid

+1
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,7 @@ profile blkid @{exec_path} flags=(attach_disconnected) {
4141
@{PROC}/swaps r,
4242

4343
# Other possible location of the cache file
44+
/dev/.blkid.tab.old rwl -> /dev/.blkid.tab,
4445
/dev/.blkid.tab{,-@{rand6}} rw,
4546
/dev/blkid.tab.old rwl -> /dev/blkid.tab,
4647

apparmor.d/profiles-g-l/issue-generator

+1-1
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ profile issue-generator @{exec_path} {
2828
/etc/sysconfig/issue-generator r,
2929

3030
@{run}/agetty.reload w,
31-
@{run}/issue r,
31+
@{run}/issue rw,
3232
@{run}/issue.@{rand10} rw,
3333
@{run}/issue.d/{,**} r,
3434

apparmor.d/profiles-s-z/useradd

+1
Original file line numberDiff line numberDiff line change
@@ -54,6 +54,7 @@ profile useradd @{exec_path} {
5454
# To create user dirs and copy files from /etc/skel/ to them
5555
@{HOME}/ rw,
5656
@{HOME}/.** w,
57+
@{HOME}/**/ r,
5758
/var/lib/*/{,*} rw,
5859
/etc/skel/{,.**} r,
5960

apparmor.d/profiles-s-z/w

+1-1
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ profile w @{exec_path} {
2424
@{sys}/devices/system/node/node@{int}/meminfo r,
2525

2626
@{run}/systemd/sessions/ r,
27-
@{run}/systemd/sessions/@{int} r,
27+
@{run}/systemd/sessions/* r,
2828

2929
@{PROC}/ r,
3030
@{PROC}/@{pids}/cmdline r,

0 commit comments

Comments
 (0)