← Back to branch summary

~apparmor-dev/apparmor/master

« back to all changes in this revision

Viewing changes to profiles/apparmor/profiles/extras/usr.sbin.userdel

  • Committer: Steve Beattie
  • Date: 2019-02-19 09:38:13 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219093813-ud526ee6hwn8nljz
The AppArmor project has been converted to git and is now hosted on
gitlab.

To get the converted repository, please do
  git clone https://gitlab.com/apparmor/apparmor

Show diffs side-by-side

added added

removed removed

Lines of Context:
profiles/apparmor/profiles/extras/usr.sbin.userdel
1
 
# vim:syntax=apparmor
2
 
# ------------------------------------------------------------------
3
 
#
4
 
#    Copyright (C) 2002-2005 Novell/SUSE
5
 
#
6
 
#    This program is free software; you can redistribute it and/or
7
 
#    modify it under the terms of version 2 of the GNU General Public
8
 
#    License published by the Free Software Foundation.
9
 
#
10
 
# ------------------------------------------------------------------
11
 
 
12
 
#include <tunables/global>
13
 
 
14
 
/usr/sbin/userdel {
15
 
  #include <abstractions/authentication>
16
 
  #include <abstractions/base>
17
 
  #include <abstractions/bash>
18
 
  #include <abstractions/consoles>
19
 
  #include <abstractions/perl>
20
 
  #include <abstractions/nameservice>
21
 
  #include <abstractions/wutmp>
22
 
 
23
 
  capability chown,
24
 
  capability dac_override,
25
 
  capability dac_read_search,
26
 
  capability sys_resource,
27
 
 
28
 
  /{usr/,}bin/cat rmix,
29
 
  /{usr/,}bin/bash rmix,
30
 
  /dev/log w,
31
 
  /etc/.pwd.lock rwk,
32
 
  /etc/cron.deny r,
33
 
  /etc/default/useradd r,
34
 
  /etc/group* rwl,
35
 
  /etc/gshadow* rwl,
36
 
  /etc/login.defs r,
37
 
  /etc/passwd* rwl,
38
 
  /etc/shadow* rwl,
39
 
  /etc/pwdutils/logging r,
40
 
  @{HOMEDIRS}**  rwl,
41
 
  @{PROC}/@{pid}/mounts r,
42
 
  /usr/bin/crontab rmix,
43
 
  /usr/lib*/pwdutils/*.so.* mr,
44
 
  /usr/sbin/userdel rmix,
45
 
  /usr/sbin/userdel-post.local rmix,
46
 
  /usr/sbin/userdel-pre.local rmix,
47
 
  # XXX
48
 
  /{,var/}run/nscd.pid r,
49
 
  /var/spool/mail/* wl,
50
 
}