forked from I2P_Developers/i2p.i2p
Install the apparmor profiles in complain mode
Instead of enabling exceptions when needed for custom set-ups, some users will opt for disabling all security functions.
This commit is contained in:
3
debian/apparmor/system_i2p
vendored
3
debian/apparmor/system_i2p
vendored
@@ -1,7 +1,8 @@
|
|||||||
|
# Last Modified: Thu May 21 18:30:32 2015
|
||||||
# vim:syntax=apparmor et
|
# vim:syntax=apparmor et
|
||||||
#include <tunables/global>
|
#include <tunables/global>
|
||||||
|
|
||||||
profile system_i2p {
|
profile system_i2p flags=(complain) {
|
||||||
#include <abstractions/i2p>
|
#include <abstractions/i2p>
|
||||||
|
|
||||||
owner /{,lib/live/mount/overlay/}var/lib/i2p/** rwkl,
|
owner /{,lib/live/mount/overlay/}var/lib/i2p/** rwkl,
|
||||||
|
4
debian/apparmor/usr.bin.i2prouter
vendored
4
debian/apparmor/usr.bin.i2prouter
vendored
@@ -1,9 +1,9 @@
|
|||||||
# Last Modified: Sun Apr 12 22:08:32 2015
|
# Last Modified: Thu May 21 18:30:32 2015
|
||||||
# vim:syntax=apparmor et ts=8 sw=4
|
# vim:syntax=apparmor et ts=8 sw=4
|
||||||
|
|
||||||
#include <tunables/global>
|
#include <tunables/global>
|
||||||
|
|
||||||
/usr/bin/i2prouter {
|
/usr/bin/i2prouter flags=(complain) {
|
||||||
#include <abstractions/i2p>
|
#include <abstractions/i2p>
|
||||||
capability sys_ptrace,
|
capability sys_ptrace,
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user