mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 06:16:03 +00:00
Code Issues Releases Wiki Activity

abstractions/base: revert ix→Pix.

Browse Source 
It simply breaks too much stuff, such as a mere "file," rule.
This commit is contained in:
intrigeri
2016-12-03 16:51:55 +01:00
parent a8ac2b4ccb
commit b6aeae70dc
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
profiles/apparmor.d/abstractions/base
View File

@@ -48,11 +48,11 @@
# available everywhere
/etc/ld.so.cache mr,
/etc/ld.so.preload r,
/{usr/,}lib{,32,64}/ld{,32,64}-*.so mrPix,
/{usr/,}lib/@{multiarch}/ld{,32,64}-*.so mrPix,
/{usr/,}lib/tls/i686/{cmov,nosegneg}/ld-*.so mrPix,
/{usr/,}lib/i386-linux-gnu/tls/i686/{cmov,nosegneg}/ld-*.so mrPix,
/opt/*-linux-uclibc/lib/ld-uClibc*so* mrPix,
/{usr/,}lib{,32,64}/ld{,32,64}-*.so mrix,
/{usr/,}lib/@{multiarch}/ld{,32,64}-*.so mrix,
/{usr/,}lib/tls/i686/{cmov,nosegneg}/ld-*.so mrix,
/{usr/,}lib/i386-linux-gnu/tls/i686/{cmov,nosegneg}/ld-*.so mrix,
/opt/*-linux-uclibc/lib/ld-uClibc*so* mrix,
# we might as well allow everything to use common libraries
/{usr/,}lib{,32,64}/** r,
@@ -148,7 +148,7 @@
# prevents access to the files from processes running under a different uid.
# encrypted ~/.Private and old-style encrypted $HOME
owner @{HOME}/.Private/** mrPixwlk,
owner @{HOME}/.Private/** mrixwlk,
# new-style encrypted $HOME
owner @{HOMEDIRS}/.ecryptfs/*/.Private/** mrPixwlk,
owner @{HOMEDIRS}/.ecryptfs/*/.Private/** mrixwlk,