etorres/packaging-scripts
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add AppArmor profiles for addpkg and delpkg scripts

Browse Source
This commit is contained in:
Eric Torres
2019-03-10 21:25:56 -07:00
parent 5dca985412
commit d5a79a00ec
4 changed files with 42 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
misc/apparmor/usr.bin.addpkg Normal file
View File

@ -0,0 +1,17 @@
#include <tunables/global>
/usr/bin/addpkg {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/python>
/usr/bin/repo-add Ux,
/etc/pacman.conf r,
/etc/pacman.d/ r,
/etc/pacman.d/** r,
/home/*/{Packages,Projects} r,
/home/*/{Packages,Projects}/** rw,
/var/cache/pacman/ r,
/var/cache/pacman/** rw,
}

17
misc/apparmor/usr.bin.delpkg Normal file
View File

@ -0,0 +1,17 @@
#include <tunables/global>
/usr/bin/delpkg {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/python>
/usr/bin/repo-remove Ux,
/etc/pacman.conf r,
/etc/pacman.d/ r,
/etc/pacman.d/** r,
/home/*/{Packages,Projects} r,
/home/*/{Packages,Projects}/** rw,
/var/cache/pacman/ r,
/var/cache/pacman/** rw,
}