mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 13:58:22 +00:00
Code Issues Releases Wiki Activity

small fix for lsblk profile

Browse Source 
Fixes bug #2103524

lsblk on some virtualized systems require access to directory
/sys/devices/LNXSYSTM:*/LNXSYBUS:*/** since block devices can be exposed
in this directory.
This commit is contained in:
Maxime Bélair
2025-03-19 16:02:55 +01:00
parent 6faa8950ed
commit b527256c0d
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
profiles/apparmor.d/lsblk
View File

@@ -26,12 +26,16 @@ profile lsblk /usr/bin/lsblk {
@{sys}/devices/virtual/** r, @{sys}/devices/virtual/** r,
@{sys}/devices/platform/** r, @{sys}/devices/platform/** r,
# Needed for Hyper-V VMs (including Azure)
@{sys}/devices/LNXSYSTM:*/LNXSYBUS:*/** r,
/dev/sr[0-9]* rk, /dev/sr[0-9]* rk,
@{run}/udev/data/** r, @{run}/udev/data/** r,
@{run}/mount/** r, @{run}/mount/** r,
@{PROC}/swaps r, @{PROC}/swaps r,
@{PROC}/cmdline r,
owner @{PROC}/@{pid}/mountinfo r, owner @{PROC}/@{pid}/mountinfo r,
include if exists <local/lsblk> include if exists <local/lsblk>