updated apparmor state

This commit is contained in:
Paul 2023-03-10 00:07:59 +01:00
parent c0add92d8d
commit dff51f8bb3
5 changed files with 7 additions and 7 deletions

View File

@ -4,8 +4,8 @@
{%- for cfg in apparmor.configs %}
apparmor-{{ cfg }}:
file.managed:
- name: "/etc/apparmor.d/{{ cfg }}"
- source: "salt://apparmor/{{ cfg }}.j2"
- name: /etc/apparmor.d/{{ cfg }}
- source: salt://apparmor/templates/{{ cfg }}.j2
- user: root
- group: root
- mode: "0644"
@ -18,4 +18,4 @@ apparmor-reload:
service.running:
- name: apparmor
- enable: true
{%- endif %}
{%- endif %}

View File

@ -24,4 +24,4 @@
owner @{HOME}/Documents/** rw,
deny network inet,
}
}

View File

@ -38,4 +38,4 @@
deny network inet,
deny network inet6,
deny network raw,
}
}

View File

@ -74,4 +74,4 @@
deny /var/cache/fontconfig/ w,
deny owner @{HOME}/.fontconfig/ w,
deny owner @{HOME}/.fontconfig/*.cache-*.TMP* w,
}
}

View File

@ -21,4 +21,4 @@
owner @{HOME}/.config/spotify/ w,
owner @{HOME}/Music/** r,
}
}