def AaExample.files

bend-osdev-apparmor@0.1.0.0 · example.bend:44

import Base
import bend-osdev-apparmor@0.1.0.0/apparmor.bend as A

44def AaExample.files() -> List<&2, A.AaSource>:
45  [AaExample.source("tunables/home", "@{HOMEDIRS} = /home/\n@{HOME} = @{HOMEDIRS}/*/ /root/\n"), AaExample.source("abstractions/base", "/etc/ld.so.cache r,\n/{usr/,}lib{,32,64}/** mr,\n"), AaExample.source("main", "include <tunables/home>\n# a cut-down version of the example in apparmor.d(5)\n/usr/bin/foo {\n  include <abstractions/base>\n  include <abstractions/base>\n  /bin/mount ux,\n  /dev/{,u}random r,\n  /etc/foo/* r,\n  /tmp/foo.* lrw,\n  @{HOME}/.foo_file rw,\n  deny /etc/shadow rw,\n  audit /var/log/foo w,\n  owner /proc/[0-9]*/stat r,\n  /usr/bin/baz Cx -> baz,\n  /usr/bin/bar px,\n  /usr/bin/** pix,\n  capability setuid,\n  network inet stream,\n  signal (send) set=(term, kill) peer=/usr/bin/bar,\n  ^hat {\n    /var/spool/* rwl,\n  }\n  profile baz {\n    /bin/bash ixr,\n  }\n}\nprofile bar /usr/bin/bar flags=(complain) {\n  /etc/bar r,\n  deny /etc/secret r,\n}\n")]