diff options
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/local')
10 files changed, 27 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/local/README b/straper/db/public/apparmor/apparmor.d/local/README new file mode 100644 index 0000000..688ed42 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/README @@ -0,0 +1,27 @@ +# This directory is intended to contain profile additions and overrides for +# inclusion by distributed profiles to aid in packaging AppArmor for +# distributions. +# +# The shipped profiles in /etc/apparmor.d can still be modified by an +# administrator and people should modify the shipped profile when making +# large policy changes, rather than trying to make those adjustments here. +# +# For simple access additions or the occasional deny override, adjusting them +# here can prevent the package manager of the distribution from interfering +# with local modifications. As always, new policy should be reviewed to ensure +# it is appropriate for your site. +# +# For example, if the shipped /etc/apparmor.d/usr.sbin.smbd profile has: +# include <local/usr.sbin.smbd> +# or +# include if exists <local/usr.sbin.smbd> +# +# then an administrator can adjust /etc/apparmor.d/local/usr.sbin.smbd +# (create the file if it doesn't exist yet) to contain any additional paths +# to be allowed, such as: +# +# /var/exports/** lrwk, +# +# Keep in mind that 'deny' rules are evaluated after allow rules, so you won't +# be able to allow access to files that are explicitly denied by the shipped +# profile using this mechanism. diff --git a/straper/db/public/apparmor/apparmor.d/local/lsb_release b/straper/db/public/apparmor/apparmor.d/local/lsb_release new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/lsb_release diff --git a/straper/db/public/apparmor/apparmor.d/local/nvidia_modprobe b/straper/db/public/apparmor/apparmor.d/local/nvidia_modprobe new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/nvidia_modprobe diff --git a/straper/db/public/apparmor/apparmor.d/local/system_tor b/straper/db/public/apparmor/apparmor.d/local/system_tor new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/system_tor diff --git a/straper/db/public/apparmor/apparmor.d/local/usr.bin.i2pd b/straper/db/public/apparmor/apparmor.d/local/usr.bin.i2pd new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/usr.bin.i2pd diff --git a/straper/db/public/apparmor/apparmor.d/local/usr.bin.man b/straper/db/public/apparmor/apparmor.d/local/usr.bin.man new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/usr.bin.man diff --git a/straper/db/public/apparmor/apparmor.d/local/usr.bin.msmtp b/straper/db/public/apparmor/apparmor.d/local/usr.bin.msmtp new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/usr.bin.msmtp diff --git a/straper/db/public/apparmor/apparmor.d/local/usr.bin.tcpdump b/straper/db/public/apparmor/apparmor.d/local/usr.bin.tcpdump new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/usr.bin.tcpdump diff --git a/straper/db/public/apparmor/apparmor.d/local/usr.sbin.dhclient b/straper/db/public/apparmor/apparmor.d/local/usr.sbin.dhclient new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/usr.sbin.dhclient diff --git a/straper/db/public/apparmor/apparmor.d/local/usr.sbin.unbound b/straper/db/public/apparmor/apparmor.d/local/usr.sbin.unbound new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/local/usr.sbin.unbound |