blob: e3a59cfdf9912f5fd838447c46bc054e9c6a4eaa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
From 454fca7483eae7b7ee613343c2c02abaa20e37e3 Mon Sep 17 00:00:00 2001
From: nl6720 <nl6720@gmail.com>
Date: Thu, 13 Feb 2020 09:58:33 +0200
Subject: [PATCH] Add "run" variable
Signed-off-by: nl6720 <nl6720@gmail.com>
(cherry picked from commit 452b5b8735e449cba29a1fb25c9bff38ba8763ec)
---
parser/apparmor.d.pod | 1 +
profiles/apparmor.d/tunables/global | 1 +
profiles/apparmor.d/tunables/run | 1 +
3 files changed, 3 insertions(+)
create mode 100644 profiles/apparmor.d/tunables/run
diff --git a/parser/apparmor.d.pod b/parser/apparmor.d.pod
index 662830bd..59ac72c9 100644
--- a/parser/apparmor.d.pod
+++ b/parser/apparmor.d.pod
@@ -1279,6 +1279,7 @@ provided AppArmor policy:
@{apparmorfs}
@{sys}
@{tid}
+ @{run}
@{XDG_DESKTOP_DIR}
@{XDG_DOWNLOAD_DIR}
@{XDG_TEMPLATES_DIR}
diff --git a/profiles/apparmor.d/tunables/global b/profiles/apparmor.d/tunables/global
index 28d6fc6d..3b6f99cc 100644
--- a/profiles/apparmor.d/tunables/global
+++ b/profiles/apparmor.d/tunables/global
@@ -19,3 +19,4 @@
#include <tunables/kernelvars>
#include <tunables/xdg-user-dirs>
#include <tunables/share>
+#include <tunables/run>
diff --git a/profiles/apparmor.d/tunables/run b/profiles/apparmor.d/tunables/run
new file mode 100644
index 00000000..e535d2fe
--- /dev/null
+++ b/profiles/apparmor.d/tunables/run
@@ -0,0 +1 @@
+@{run}=/run /var/run
--
2.26.2
|
