mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-30 05:47:59 +00:00
110 lines
1.5 KiB
Plaintext
110 lines
1.5 KiB
Plaintext
abi <abi/4.19>,
|
|
|
|
alias /foo -> /bar,
|
|
|
|
include <tunables/global>
|
|
include if exists <tunables/nothing>
|
|
|
|
@{xy} = x y
|
|
@{asdf} = "" foo
|
|
|
|
$foo = false
|
|
$bar = true
|
|
|
|
/bin/bar///bin/baz {
|
|
/home/pathchild w,
|
|
|
|
}
|
|
# A simple test comment which will persist
|
|
|
|
|
|
/usr/bin/a/simple/cleanprof/test/profile {
|
|
abi "abi/4.20",
|
|
|
|
include <abstractions/base>
|
|
include if exists <foo>
|
|
|
|
set rlimit nofile <= 256,
|
|
|
|
audit capability,
|
|
|
|
network stream,
|
|
|
|
dbus send bus=session,
|
|
|
|
mount options=(rw, suid) /c -> /3,
|
|
|
|
signal set=(abrt alrm bus chld fpe hup ill int kill pipe quit segv stkflt term trap usr1 usr2),
|
|
|
|
pivot_root oldroot=/mnt/root/old/,
|
|
|
|
unix (receive) type=dgram,
|
|
|
|
deny owner link /some/thing -> /foo/bar,
|
|
|
|
allow /home/*/** r,
|
|
allow /home/foo/** w,
|
|
link subset /alpha/beta -> /tmp/**,
|
|
|
|
change_profile,
|
|
|
|
|
|
hat bar {
|
|
capability sys_admin,
|
|
|
|
/etc/passwd r,
|
|
|
|
}
|
|
|
|
^foo {
|
|
capability dac_override,
|
|
|
|
/etc/fstab r,
|
|
|
|
}
|
|
|
|
profile test_child /foobar {
|
|
/etc/child rw,
|
|
|
|
}
|
|
}
|
|
|
|
/usr/bin/a/simple/cleanprof/test/profile//child {
|
|
/home/test-child r,
|
|
|
|
}
|
|
/usr/bin/other/cleanprof/test/profile {
|
|
allow /home/*/** rw,
|
|
allow /home/foo/bar r,
|
|
|
|
}
|
|
/what/ever/xattr xattrs=(foo=bar) flags=( complain ) {
|
|
/what/ever r,
|
|
|
|
}
|
|
profile foo//bar {
|
|
/home/namedchild r,
|
|
|
|
}
|
|
profile uniquename /attach {
|
|
if defined $foo {
|
|
/bin/true rix,
|
|
|
|
} else if x in @xy {
|
|
if @{asdf} > " a test" {
|
|
/greaterthan r,
|
|
|
|
} else {
|
|
file,
|
|
|
|
}
|
|
|
|
/bin/false rix,
|
|
|
|
} else {
|
|
/dev/null r,
|
|
|
|
}
|
|
|
|
}
|