jeans/operating-system
jeans/operating-system
1
0
Fork 0
mirror of https://github.com/home-assistant/operating-system.git synced 2025-07-26 06:26:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update hassio-supervisor

Browse Source
This commit is contained in:
Pascal Vizeli 2018-05-03 11:13:39 +02:00 committed by GitHub
parent 054f6aa4fc
commit 0d7cb228ae
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
buildroot-external/apparmor/hassio-supervisor
View File

@ -13,20 +13,11 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) {
/usr/bin/socat cx, /usr/bin/socat cx,
/usr/bin/gdbus cx, /usr/bin/gdbus cx,
deny /bin/** wl,
deny /boot/** wl,
deny /etc/** wl,
deny /home/** wl,
deny /lib/** wl,
deny /mnt/** wl,
deny /proc/** wl, deny /proc/** wl,
deny /root/** wl, deny /root/** wl,
deny /sbin/** wl,
deny /tmp/** wl,
deny /sys/** wl, deny /sys/** wl,
deny /usr/** wl,
/** r,
/** r,
/data/** rw, /data/** rw,
/var/run/docker.sock rw, /var/run/docker.sock rw,
@ -66,12 +57,12 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) {
/bin/busybox ix, /bin/busybox ix,
/usr/bin/git mr, /usr/bin/git mr,
/usr/libexec/git-core/* ix, /usr/libexec/git-core/* ix,
/lib/* mr,
/** r,
/data/addons/** rw,
deny /data/homeassistant rw, deny /data/homeassistant rw,
deny /data/ssl rw, deny /data/ssl rw,
/lib/* mr,
/** r,
/data/addons/** rw,
} }
} }