Skip to content

Commit

Permalink
feat(profile): add e2scrub_all.
Browse files Browse the repository at this point in the history
  • Loading branch information
roddhjav committed Nov 22, 2023
1 parent 17d187e commit c62b459
Showing 1 changed file with 27 additions and 0 deletions.
27 changes: 27 additions & 0 deletions apparmor.d/profiles-a-f/e2scrub_all
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <[email protected]>
# SPDX-License-Identifier: GPL-2.0-only

abi <abi/3.0>,

include <tunables/global>

@{exec_path} = @{bin}/e2scrub_all
profile e2scrub_all @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/disks-read>

capability sys_admin,
capability sys_rawio,

@{exec_path} mr,

@{bin}/{,ba,da}sh r,
@{bin}/readlink rix,

/etc/e2scrub.conf r,

/dev/tty rw,

include if exists <local/e2scrub_all>
}

0 comments on commit c62b459

Please sign in to comment.