logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://anongit.hacktivis.me/git/apparmor.d.git/

shell (806B)

    

  1. # Copyright 2020 Haelwenn (lanodan) Monnier <contact+apparmor.d@hacktivis.me>
  2. # Distributed under the terms of the GNU General Public License v2
  4. #include <tunables/global>
  6. profile shell /{,usr/}bin/*sh flags=(complain) {
  7. 	/ rwlk,
  8. 	/** rwlkmpux,
  10. 	audit deny network,
  12. 	audit deny @{HOME}/.gnupg/{,**} mrwkl,
  13. 	audit deny @{HOME}/.ssh/{,**} mrwkl,
  14. 	audit deny @{HOME}/.mozilla/{,**} mrwkl,
  15. 	audit deny @{HOME}/.config/{,**} mrwkl,
  16. 	audit deny @{HOME}/.mutt** mrwkl,
  17. 	audit deny @{HOME}/.viminfo** mrwkl,
  19. 	allow @{HOME}/.ssh/agent.pid r,
  21. 	allow @{HOME}/.*shrc rwlkmpux,
  22. 	allow @{HOME}/.*profile rwlkmpux,
  23. 	allow @{HOME}/.*log{in,out} rwlkmpux,
  24. 	allow @{HOME}/.*history rwlkmpux,
  26. 	# bash
  27. 	allow @{HOME}/.inputrc mrk,
  28. 	allow @{HOME}/.bash* mrk,
  30. 	# zsh
  31. 	allow @{HOME}/.zshenv rwlkmpux,
  33. 	signal receive,
  34. }