Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ubuntu 2204 compatibility #3

Open
wants to merge 4 commits into
base: stable
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions apparmor.d/bin.b2sum
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "b2sum" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/b2sum
Expand All @@ -19,6 +20,8 @@ profile b2sum /{,usr/}{bin,sbin}/b2sum {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.b2sum>
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.base32
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "base32" GNU coreutil
## Tested with coreutils 9.1-1 on Arch Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/base32
Expand All @@ -19,6 +20,8 @@ profile base32 /{,usr/}{bin,sbin}/base32 {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.base32>
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.base64
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "base64" GNU coreutil
## Tested with coreutils 9.1-1 on Arch Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/base64
Expand All @@ -19,6 +20,8 @@ profile base64 /{,usr/}{bin,sbin}/base64 {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.base64>
Expand Down
2 changes: 2 additions & 0 deletions apparmor.d/bin.basename
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "basename" GNU coreutil
## Tested with coreutils 9.1-1 on Arch Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/basename
Expand All @@ -16,6 +17,7 @@ profile basename /{,usr/}{bin,sbin}/basename {
# Basic operating necessities
include <abstractions/base>
include <abstractions/consoles>
/{,usr/}{bin,sbin}/basename mr,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.basename>
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.basenc
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "basenc" GNU coreutil
## Tested with coreutils 9.1-1 on Arch Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/basenc
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.cat
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "cat" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/cat
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.cksum
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "cksum" GNU coreutil
## Tested with coreutils 9.1-1 on Arch Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/cksum
Expand All @@ -19,6 +20,8 @@ profile cksum /{,usr/}{bin,sbin}/cksum {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.cksum>
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.comm
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "comm" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/comm
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.cut
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "cut" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/cut
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.diff
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "diff" GNU diffutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/diffutils
Expand Down
6 changes: 4 additions & 2 deletions apparmor.d/bin.dir
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "dir" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/dir
Expand All @@ -17,8 +18,9 @@ profile dir /{,usr/}{bin,sbin}/dir {
include <abstractions/base>
include <abstractions/consoles>

# As a coreutil, we might read data from anywhere on the system
/** r,
# As a coreutil, we might read data from any directory on the system
/ r,
/**/ r,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.dir>
Expand Down
2 changes: 2 additions & 0 deletions apparmor.d/bin.dirname
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "dirname" GNU coreutil
## Tested with coreutils 9.1-1 on Arch Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/dirname
Expand All @@ -16,6 +17,7 @@ profile dirname /{,usr/}{bin,sbin}/dirname {
# Basic operating necessities
include <abstractions/base>
include <abstractions/consoles>
/{,usr/}{bin,sbin}/dirname mr,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.dirname>
Expand Down
9 changes: 7 additions & 2 deletions apparmor.d/bin.du
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "du" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/du
Expand All @@ -16,9 +17,13 @@ profile du /{,usr/}{bin,sbin}/du {
# Basic operating necessities
include <abstractions/base>
include <abstractions/consoles>
/{,usr/}{bin,sbin}/du mr,

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,

# As a coreutil, we might read data from any directory on the system
/ r,
/**/ r,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.du>
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.echo
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "echo" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/echo
Expand Down
2 changes: 2 additions & 0 deletions apparmor.d/bin.file
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "file" utility
## Tested with file 5.43-1 on Artix Linux
## file 5.41-3 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://darwinsys.com/file/
Expand All @@ -19,6 +20,7 @@ profile file /{,usr/}{bin,sbin}/file {

# As a general utility, we might read data from anywhere on the system
/** r,
capability dac_read_search,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.file>
Expand Down
4 changes: 4 additions & 0 deletions apparmor.d/bin.grep
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,7 @@
## AppArmor profile for the "grep" GNU utility
## Tested with: grep 3.8-2 on Artix Linux
## grep 3.8-2 on Arch Linux
## grep 3.7-1build1 on Ubuntu 22.04
## Profile authors: EarthlySkies <[email protected]>
## Profile license: the MIT license
## Target program : https://gnu.org/software/grep
Expand All @@ -16,8 +17,11 @@ profile grep /{,usr/}{bin,sbin}/grep {

# Basic operating necessities
include <abstractions/base>
include <abstractions/consoles>
/{,usr/}{bin,sbin}/grep mr,

capability dac_read_search,

# We need this, since in addition to reading from stdin, grep can also be
# used to read directly from files and those files can be in arbitrary
# locations anywhere on the system
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.head
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "head" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/head
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.md5sum
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "md5sum" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/md5sum
Expand All @@ -19,6 +20,8 @@ profile md5sum /{,usr/}{bin,sbin}/md5sum {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.md5sum>
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.od
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "od" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/od
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.sha1sum
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "sha1sum" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/sha1sum
Expand All @@ -19,6 +20,8 @@ profile sha1sum /{,usr/}{bin,sbin}/sha1sum {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.sha1sum>
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.sha224sum
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "sha224sum" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/sha224sum
Expand All @@ -19,6 +20,8 @@ profile sha224sum /{,usr/}{bin,sbin}/sha224sum {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.sha224sum>
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.sha256sum
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "sha256sum" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/sha256sum
Expand All @@ -19,6 +20,8 @@ profile sha256sum /{,usr/}{bin,sbin}/sha256sum {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.sha256sum>
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.sha384sum
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "sha384sum" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/sha384sum
Expand All @@ -19,6 +20,8 @@ profile sha384sum /{,usr/}{bin,sbin}/sha384sum {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.sha384sum>
Expand Down
3 changes: 3 additions & 0 deletions apparmor.d/bin.sha512sum
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "sha512sum" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/sha512sum
Expand All @@ -19,6 +20,8 @@ profile sha512sum /{,usr/}{bin,sbin}/sha512sum {

# As a coreutil, we might read data from anywhere on the system
/** r,
capability dac_read_search,
deny capability dac_override,

# Site-specific additions and overrides. See local/README for details
include if exists <local/bin.sha512sum>
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.sort
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "sort" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/sort
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.strings
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "srings" GNU binutil
## Tested with binutils 2.39-3 on Artix Linux
## binutils 2.38-4ubuntu2 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/binutils
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.tac
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "tac" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/tac
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.tail
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "tail" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/tail
Expand Down
1 change: 1 addition & 0 deletions apparmor.d/bin.wc
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,7 @@
##-----------------------------------------------------------------------------
## AppArmor profile for the "wc" GNU coreutil
## Tested with coreutils 9.1-1 on Artix Linux
## coreutils 8.32-4.1ubuntu1 on Ubuntu 22.04
## Profile author: EarthlySkies <[email protected]>
## Profile license: MIT license
## Target program: https://gnu.org/software/coreutils/wc
Expand Down