logo

apparmor.d

Unnamed repository; edit this file 'description' to name the repository. git clone https://hacktivis.me/git/apparmor.d.git

zgrep (1418B)

    

  1. # ------------------------------------------------------------------
  2. #
  3. #    Copyright (C) 2022 Christian Boltz
  4. #
  5. #    This program is free software; you can redistribute it and/or
  6. #    modify it under the terms of version 2 of the GNU General Public
  7. #    License published by the Free Software Foundation.
  8. #
  9. # ------------------------------------------------------------------
  11. abi <abi/3.0>,
  13. include <tunables/global>
  15. profile zgrep /usr/bin/{x,}zgrep {
  16.   include <abstractions/base>
  17.   include <abstractions/bash>
  19.   /dev/tty rw,
  20.   /usr/bin/{ba,da,}sh ix,
  21.   /usr/bin/bzip2 Cx -> helper,
  22.   /usr/bin/cat ix,
  23.   /usr/bin/egrep Cx -> helper,
  24.   /usr/bin/expr ix,
  25.   /usr/bin/fgrep Cx -> helper,
  26.   /usr/bin/grep Cx -> helper,
  27.   /usr/bin/gzip Cx -> helper,
  28.   /usr/bin/mktemp ix,
  29.   /usr/bin/rm ix,
  30.   /usr/bin/sed Cx -> sed,
  31.   /usr/bin/xz Cx -> helper,
  32.   /usr/bin/xzgrep r,
  33.   /usr/bin/zgrep Cx -> helper,
  34.   /usr/bin/zstd Cx -> helper,
  35.   owner /tmp/zgrep* rw,
  36.   /usr/bin/zgrep r,
  38.   include if exists <local/zgrep>
  40.   profile helper {
  41.     include <abstractions/base>
  43.     capability dac_override,
  44.     capability dac_read_search,
  46.     /dev/tty w,
  48.     /usr/bin/{ba,da,}sh ix,
  49.     /usr/bin/bzip2 mr,
  50.     /usr/bin/grep mrix,
  51.     /usr/bin/gzip mr,
  52.     /usr/bin/xz mr,
  53.     /usr/bin/zstd mr,
  54.     /{,**} r,
  56.   }
  58.   profile sed {
  59.     include <abstractions/base>
  61.     /dev/tty rw,
  62.     /usr/bin/{ba,da,}sh ix,
  63.     /usr/bin/sed mr,
  65.   }
  66. }