avm/hassio-addons
1
0
Fork 0
mirror of https://github.com/alexbelgium/hassio-addons.git synced 2026-06-05 23:25:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update apparmor.txt

Browse Source
This commit is contained in:
Alexandre
2021-02-14 22:26:42 +01:00
committed by GitHub
parent cb23ba8aa1
commit 147f60faa2
1 changed files with 8 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
scrutiny/apparmor.txt
View File

@@ -1,6 +1,6 @@
#include <tunables/global> #include <tunables/global>
profile scrutiny_addon flags=(attach_disconnected,mediate_deleted) { profile 6c45555e_qbittorrent2 flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base> #include <abstractions/base>
capability, capability,
@@ -12,30 +12,27 @@ profile scrutiny_addon flags=(attach_disconnected,mediate_deleted) {
capability setgid, capability setgid,
capability setuid, capability setuid,
capability dac_override, capability dac_override,
capability sys_amin,
capability dac_read_search,
# S6-Overlay # S6-Overlay
/bin/** ix, /bin/** ix,
/usr/bin/** ix, /usr/bin/** ix,
/usr/lib/bashio/** ix, /usr/lib/bashio/** ix,
/etc/s6/** rix, /etc/s6/** ix,
/run/s6/** rix, /run/s6/** ix,
/etc/services.d/** rwix, /etc/services.d/** rwix,
/etc/cont-init.d/** rwix, /etc/cont-init.d/** rwix,
/etc/cont-finish.d/** rwix, /etc/cont-finish.d/** rwix,
/init rix,
/var/run/** mrwkl,
/var/run/ mrwkl,
/proc/self/attr/** mrwkl,
# Files required # Files required
/dev/sda1 mrwkl, /dev/sda1 mrwkl,
/dev/sdb1 mrwkl, /dev/sdb1 mrwkl,
/dev/mmcblk0p1 mrwkl, /dev/mmcblk0p1 mrwkl,
/dev/* mrwkl, /dev/* mrwkl,
/tmp/** mrkwl, /tmp/** mrkwl,
# Data access # Data access
/data/** rw, /data/** rw,
# suppress ptrace denials when using 'docker ps' or using 'ps' inside a container # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
ptrace (trace,read) peer=docker-default, ptrace (trace,read) peer=docker-default,