mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-30 22:05:27 +00:00
Various cupsd profile fixes/additions
Changed /var/run/cups/** rw, to /{,var/}run/cups/ rw, /{,var/}run/cups/** rw, as requested by Steve Beattie With this change: Acked-By: Steve Beattie <sbeattie@ubuntu.com>
This commit is contained in:
@@ -16,20 +16,31 @@
|
||||
capability setuid,
|
||||
|
||||
/bin/bash ixr,
|
||||
/bin/cat ix,
|
||||
|
||||
/usr/bin/foomatic-rip ixr,
|
||||
/etc/foomatic/** r,
|
||||
|
||||
/usr/bin/gs ix,
|
||||
/usr/lib/ghostscript/** m,
|
||||
/usr/lib64/ghostscript/** m,
|
||||
/usr/share/ghostscript/** r,
|
||||
/etc/ghostscript/** r,
|
||||
|
||||
/dev/lp0 rw,
|
||||
/dev/tty rw,
|
||||
/dev/ttyS? w,
|
||||
/etc/cups rw,
|
||||
/etc/cups/ r,
|
||||
/etc/cups/* r,
|
||||
/etc/cups/** r,
|
||||
/etc/cups/certs w,
|
||||
/etc/cups/certs/* w,
|
||||
/etc/cups/classes.conf rw,
|
||||
/etc/cups/cupsd.conf rw,
|
||||
/etc/cups/*.conf* rw,
|
||||
/etc/cups/ppd rw,
|
||||
/etc/printcap rw,
|
||||
/etc/cups/printcap rw,
|
||||
/etc/cups/printers.conf rw,
|
||||
/etc/cups/ssl rw,
|
||||
/etc/cups/yes/* rw,
|
||||
/etc/hosts.allow r,
|
||||
/etc/hosts.deny r,
|
||||
/proc/meminfo r,
|
||||
@@ -39,11 +50,15 @@
|
||||
/usr/bin/smbspool ixr,
|
||||
/usr/lib/cups/backend/* ixr,
|
||||
/usr/lib/cups/filter/* ixr,
|
||||
/usr/sbin/cupsd mr,
|
||||
/usr/sbin/cupsd mixr,
|
||||
/usr/share/cups/** r,
|
||||
/var/log/cups/access_log rw,
|
||||
/var/log/cups/error_log rw,
|
||||
/var/spool/cups rw,
|
||||
/var/spool/cups/** rw,
|
||||
/var/spool/cups/tmp w,
|
||||
/var/spool/cups/tmp/ r,
|
||||
/{var/,}run/cups/** rw,
|
||||
/var/cache/cups/ rw,
|
||||
/var/cache/cups/** rw,
|
||||
}
|
||||
|
Reference in New Issue
Block a user