mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 14:55:10 +00:00
Code Issues Releases Wiki Activity

abstractions/ssh_certs: extend pki/trust directories

Browse Source 
- add pki/blacklist and pki/blocklist
- add /usr/share/pki/ in adddition to /etc/pki/

pki/blocklist was suggested by @darix, the other changes are things I noticed while adding it.
This commit is contained in:
Christian Boltz
2022-03-22 12:28:41 +01:00
parent e2319167d0
commit 32cd90eb88
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
profiles/apparmor.d/abstractions/ssl_certs
View File

@@ -15,8 +15,9 @@
/etc/{,libre}ssl/ r, /etc/{,libre}ssl/ r,
/etc/{,libre}ssl/cert.pem r, /etc/{,libre}ssl/cert.pem r,
/etc/{,libre}ssl/certs/{,**} r, /etc/{,libre}ssl/certs/{,**} r,
/etc/pki/trust/{,*} r, /{etc,usr/share}/pki/bl[ao]cklist/{,*} r,
/etc/pki/trust/anchors/{,**} r, /{etc,usr/share}/pki/trust/{,*} r,
/{etc,usr/share}/pki/trust/anchors/{,**} r,
/usr/share/ca-certificates/{,**} r, /usr/share/ca-certificates/{,**} r,
/usr/share/ssl/certs/ca-bundle.crt r, /usr/share/ssl/certs/ca-bundle.crt r,
/usr/local/share/ca-certificates/{,**} r, /usr/local/share/ca-certificates/{,**} r,