2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 14:25:52 +00:00

apply suggestions from @georgiag

This commit is contained in:
Giampaolo Fresi Roglia
2024-11-06 11:29:14 +01:00
parent b496786a18
commit 06dbaca1c8

View File

@@ -64,7 +64,7 @@ profile tnftp /usr/bin/tnftp {
# here we are restricting execution to files in a limited set of
# directories, for which we also deny write access.
file Cx @{tnftp_rx}/* -> cmds,
deny file w @{tnftp_rx}/*,
audit deny file w @{tnftp_rx}/*,
profile cmds {
include <abstractions/base>
@@ -77,7 +77,7 @@ profile tnftp /usr/bin/tnftp {
deny network,
file ixmr @{tnftp_rx}/*,
deny file w @{tnftp_rx}/*,
audit deny file w @{tnftp_rx}/*,
# allow read on anything on @{HOME} not explicitly denied
owner file r @{HOME},