Skip to content
This repository has been archived by the owner on Jan 15, 2024. It is now read-only.

Remove write access to /proc/mtrr #44

Merged
merged 1 commit into from Mar 5, 2020
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
3 changes: 1 addition & 2 deletions etc/apparmor.d/abstractions/init-systemd
Expand Up @@ -174,9 +174,8 @@
/proc/asound/card[0-9]*/ r,
/proc/asound/card[0-9]*/pcm[0-9]*/ r,
/proc/asound/card[0-9]*/pcm[0-9]*/sub[0-9]*/status r,
owner /proc/mtrr rw,
owner /proc/*/{,setgroups,gid_map,uid_map} w,
owner /proc/{,kmsg,devices,modules} r,
owner /proc/{,kmsg,devices,modules,mtrr} r,
owner /proc/tty/drivers r,
owner /proc/sysvipc/{,shm,sem,msg} r,

Expand Down