apparmor.d

lib.rc.sh.openrc-run.sh (383B)

# Copyright 2020 Haelwenn (lanodan) Monnier <contact+apparmor.d@hacktivis.me>
# Distributed under the terms of the GNU General Public License v2
#include <tunables/global>
/{lib/rc/sh/openrc-run.sh,sbin/openrc-run} {
	/ rwlk,
	/** rwlkmpux,
	audit deny network,
	audit deny @{HOME}/{,**} mrwkl,
	signal receive,
	signal send,
	capability mac_admin,
	capability dac_override,
}