aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/unix-chkpwd
diff options
context:
space:
mode:
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/unix-chkpwd')
-rw-r--r--straper/db/public/apparmor/apparmor.d/unix-chkpwd35
1 files changed, 0 insertions, 35 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/unix-chkpwd b/straper/db/public/apparmor/apparmor.d/unix-chkpwd
deleted file mode 100644
index a338a5f..0000000
--- a/straper/db/public/apparmor/apparmor.d/unix-chkpwd
+++ /dev/null
@@ -1,35 +0,0 @@
-# apparmor.d - Full set of apparmor profiles
-# Copyright (C) 2019-2021 Mikhail Morfikov
-# SPDX-License-Identifier: GPL-2.0-only
-
-# The apparmor.d project comes with several variables and abstractions
-# that are not part of upstream AppArmor yet. Therefore this profile was
-# adopted to use abstractions and variables that are available.
-# Copyright (C) Christian Boltz 2024
-
-abi <abi/4.0>,
-
-include <tunables/global>
-
-profile unix-chkpwd /{,usr/}{,s}bin/unix_chkpwd flags=(complain) {
- include <abstractions/base>
- include <abstractions/nameservice>
-
- # To write records to the kernel auditing log.
- capability audit_write,
-
- network netlink raw,
-
- /{,usr/}{,s}bin/unix_chkpwd mr,
-
- /etc/shadow r,
-
- # systemd userdb, used in nspawn
- /run/host/userdb/*.user r,
- /run/host/userdb/*.user-privileged r,
-
- # file_inherit
- owner /dev/tty[0-9]* rw,
-
- include if exists <local/unix-chkpwd>
-}