mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-31 06:16:03 +00:00
Code Issues Releases Wiki Activity

profiles/a/frr: clean up rules only needed by topotests

Browse Source
This commit is contained in:
Jorge Sancho Larraz
2025-02-05 16:31:03 +01:00
parent 7a98040b1b
commit c67061c64f
1 changed files with 2 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
profiles/apparmor.d/abstractions/frr
View File

@@ -23,6 +23,7 @@
capability dac_override,
capability dac_read_search,
/ r,
@{run}/frr/ r,
@{run}/frr/zserv.api rw,
@{run}/frr/@{profile_name}.pid rwk,
@@ -39,7 +40,7 @@
# Daemon config
/etc/frr/ r,
/etc/frr/@{profile_name}.conf{,.*} rwl,
/etc/frr/@{profile_name}.conf rw,
# Log file
/var/log/frr/ w,
@@ -51,13 +52,4 @@
owner /var/tmp/frr/@{profile_name}.@{pid}/crashlog w,
owner /var/tmp/frr/@{profile_name}.@{pid}/logbuf.@{tid} rw,
# Program output (working directory)
owner / r,
owner /tmp/ r,
owner /tmp/topotests/ r,
owner /tmp/topotests/** rw,
# Tests for staticd, bgpd, ospfd
owner /tmp/*.log w,
include if exists <abstractions/frr.d>