From a260468d526668fe2e47036d38eb019762254eec Mon Sep 17 00:00:00 2001 From: Pascal Vizeli Date: Sat, 5 May 2018 00:55:58 +0200 Subject: [PATCH] Update hassio-supervisor --- buildroot-external/apparmor/hassio-supervisor | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/buildroot-external/apparmor/hassio-supervisor b/buildroot-external/apparmor/hassio-supervisor index d44e6c42d..1b52e1d91 100644 --- a/buildroot-external/apparmor/hassio-supervisor +++ b/buildroot-external/apparmor/hassio-supervisor @@ -35,11 +35,9 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) { deny network packet, signal (receive) set=(kill,term), + capability net_bind_service, /usr/bin/socat mr, - /lib/* mr, - - capability net_bind_service, } profile /usr/bin/gdbus flags=(attach_disconnected,mediate_deleted) { @@ -49,8 +47,6 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) { unix (send, receive) type=stream, /usr/bin/gdbus mr, - /lib/* mr, - /{,var/}run/dbus/system_bus_socket rw, } @@ -68,7 +64,6 @@ profile hassio-supervisor flags=(attach_disconnected,mediate_deleted) { deny /data/ssl rw, /** r, - /lib/* mr, /data/addons/** lrw, capability dac_override,