mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 10:07:12 +00:00
Code Issues Releases Wiki Activity

fixup profile

Browse Source
This commit is contained in:
John Johansen 2025-05-09 04:52:53 -07:00
parent 6e9ff1fa61
commit fba1ced1bc
1 changed files with 1 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
profiles/apparmor.d/ipa_verify
View File

@ -3,16 +3,12 @@ abi <abi/4.0>,
include <tunables/global>
@{arg1}=/**/*.so
profile ipa_verify /usr/bin/ipa_verify flags=(unconfined) {
userns,
@{exec_path} mr,
profile ipa_verify /usr/bin/ipa_verify {
include <abstractions/base>
# Until we can replace arg1 above with real arg parsing
include <abstractions/private-files-strict>
/usr/bin/ipa_verify r,
@{exec_path} mr,
# Probably enumerated by libcamera initialization but not needed for this tool's functionality
deny /sys/devices/system/node/ r,