mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 01:57:43 +00:00
Code Issues Releases Wiki Activity

profiles: mbsync: make use of nameservice-strict abstraction

Browse Source 
Signed-off-by: Eduardo Barretto <eduardo.barretto@canonical.com>
This commit is contained in:
Eduardo Barretto 2024-11-07 19:03:30 +01:00
parent 74ad177d07
commit 5f0fcfcae9
No known key found for this signature in database
GPG Key ID: B92697DB02554590
1 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
profiles/apparmor.d/mbsync
View File

@ -15,6 +15,7 @@ include <tunables/global>
profile mbsync /usr/bin/mbsync { profile mbsync /usr/bin/mbsync {
include <abstractions/base> include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
network inet dgram, network inet dgram,
@ -23,12 +24,7 @@ profile mbsync /usr/bin/mbsync {
network inet6 stream, network inet6 stream,
network netlink raw, network netlink raw,
@{etc_ro}/gai.conf r,
@{etc_ro}/host.conf r,
@{etc_ro}/hosts r,
@{etc_ro}/nsswitch.conf r,
@{etc_ro}/ssl/openssl.cnf r, @{etc_ro}/ssl/openssl.cnf r,
@{run}/systemd/resolve/stub-resolv.conf r,
/usr/bin/mbsync r, /usr/bin/mbsync r,
owner @{HOME}/.mbsyncrc r, owner @{HOME}/.mbsyncrc r,
owner @{HOME}/Mail/**/ r, owner @{HOME}/Mail/**/ r,