mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-31 14:25:52 +00:00
more granularity for process's child threads
This commit is contained in:
committed by
Ryan Lee
parent
115ff87df7
commit
b50eb2d18e
@@ -23,7 +23,10 @@ profile lsof /usr/bin/lsof {
|
|||||||
@{PROC}/@{pid}/task/ r,
|
@{PROC}/@{pid}/task/ r,
|
||||||
@{PROC}/@{pid}/fd/ r,
|
@{PROC}/@{pid}/fd/ r,
|
||||||
@{PROC}/@{pid}/fdinfo/* r,
|
@{PROC}/@{pid}/fdinfo/* r,
|
||||||
@{PROC}/@{pid}/task/** r,
|
|
||||||
|
@{PROC}/@{pid}/task/@{pid}/stat r,
|
||||||
|
@{PROC}/@{pid}/task/@{pid}/fd r,
|
||||||
|
@{PROC}/@{pid}/task/@{pid}/fdinfo/* r,
|
||||||
|
|
||||||
include if exists <local/lsof>
|
include if exists <local/lsof>
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user