wallenstein/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2025-08-02 10:53:01 +02:00
Code Issues Projects Releases Wiki Activity

Remove old binary from apparmor

Browse source
This commit is contained in:
rodeodomino 2020-03-06 15:57:02 -05:00
parent 8be6a26eee
commit 59146d04b3
1 changed files with 3 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
roles/dns/files/apparmor.profile.dnscrypt-proxy
View file

@ -1,6 +1,6 @@
#include <tunables/global> #include <tunables/global>
/usr/{s,}bin/dnscrypt-proxy flags=(attach_disconnected) { /opt/dnscrypt-proxy/dnscrypt-proxy flags=(attach_disconnected) {
#include <abstractions/base> #include <abstractions/base>
#include <abstractions/nameservice> #include <abstractions/nameservice>
#include <abstractions/openssl> #include <abstractions/openssl>
@ -14,17 +14,13 @@
/etc/dnscrypt-proxy/** r, /etc/dnscrypt-proxy/** r,
/opt/dnscrypt-proxy/** rw, /opt/dnscrypt-proxy/** rw,
/usr/bin/dnscrypt-proxy mr, /opt/dnscrypt-proxy/dnscrypt-proxy mr,
/tmp/public-resolvers.md* rw, /tmp/public-resolvers.md* rw,
/etc/systemd/system/dnscrypt-proxy.service rw,
/tmp/*.tmp w,
owner /tmp/*.tmp r,
/run/systemd/notify rw, /run/systemd/notify rw,
/lib/x86_64-linux-gnu/ld-*.so mr, /lib/x86_64-linux-gnu/ld-*.so mr,
@{PROC}/sys/kernel/hostname r, @{PROC}/sys/kernel/hostname r,
@{PROC}/sys/net/core/somaxconn r, @{PROC}/sys/net/core/somaxconn r,
/etc/ld.so.cache r, /etc/ld.so.cache r,
/usr/local/lib/{@{multiarch}/,}libldns.so* mr,
/usr/local/lib/{@{multiarch}/,}libsodium.so* mr,
} }