diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/apparmor/apparmor.d/lsb_release | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/lsb_release')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/lsb_release | 54 |
1 files changed, 0 insertions, 54 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/lsb_release b/straper/db/public/apparmor/apparmor.d/lsb_release deleted file mode 100644 index 3f40918..0000000 --- a/straper/db/public/apparmor/apparmor.d/lsb_release +++ /dev/null @@ -1,54 +0,0 @@ -# Note: This profile does not specify an attachment path because it is -# intended to be used only via "Px -> lsb_release" exec transitions from -# other profiles. We want to confine the lsb_release(1) utility when it -# is invoked from other confined applications, but not when it is used -# in regular (unconfined) shell scripts or run directly by the user. - -abi <abi/4.0>, - -include <tunables/global> - -# Do not attach to /usr/bin/lsb_release by default -profile lsb_release { - include <abstractions/base> - include <abstractions/python> - include <abstractions/terminfo> - - owner @{PROC}/@{pid}/fd/ r, - - /dev/tty rw, - - /usr/bin/lsb_release r, - /usr/bin/python3.{1,}[0-9] mr, - - /etc/debian_version r, - /etc/default/apport r, - /etc/dpkg/origins/** r, - /etc/lsb-release r, - /etc/lsb-release.d/ r, - - /{usr/,}bin/bash ixr, - /{usr/,}bin/dash ixr, - /usr/bin/basename ixr, - /usr/bin/dpkg-query ixr, - /usr/bin/cat ixr, - /usr/bin/cut ixr, - /usr/bin/getopt ixr, - /usr/bin/sed ixr, - /usr/bin/tr ixr, - - # TODO - many more permissions needed for this to work - deny /usr/bin/apt-cache x, - - /usr/bin/ r, - /usr/include/python*/pyconfig.h r, - /usr/share/distro-info/** r, - /usr/share/dpkg/** r, - /var/lib/dpkg/** r, - - # file_inherit - deny /tmp/gtalkplugin.log w, - - # Site-specific additions and overrides. See local/README for details. - include if exists <local/lsb_release> -} |
