mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-03 07:45:50 +00:00
Code Issues Releases Wiki Activity

usr.sbin.sshd: add cgroup-related rules

Browse Source
This commit is contained in:
Simon Deziel
2016-04-05 15:46:05 -04:00
parent 1fcdad4f1e
commit aedce34542
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
profiles/apparmor/profiles/extras/usr.sbin.sshd
View File

@@ -70,6 +70,9 @@
owner @{PROC}/@{pid}/oom_adj rw, owner @{PROC}/@{pid}/oom_adj rw,
owner @{PROC}/@{pid}/oom_score_adj rw, owner @{PROC}/@{pid}/oom_score_adj rw,
/sys/fs/cgroup/*/user/*/[0-9]*/ rw,
/sys/fs/cgroup/systemd/user.slice/user-[0-9]*.slice/session-c[0-9]*.scope/ rw,
# should only be here for use in non-change-hat openssh # should only be here for use in non-change-hat openssh
# duplicated from EXEC hat (+r) # duplicated from EXEC hat (+r)
/bin/ash Uxr, /bin/ash Uxr,