1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
#!/bin/sh
set -e
set -u
PROFILES_NAMES="guestfs-tools \
lsb_release \
nvidia_modprobe \
system_tor \
usr.bin.evince \
usr.bin.freshclam \
usr.bin.man \
usr.bin.msmtp \
usr.bin.onioncircuits \
usr.bin.papers \
usr.bin.passt \
usr.bin.pasta \
usr.bin.pidgin \
usr.bin.tcpdump \
usr.bin.totem \
usr.bin.totem-previewers \
usr.lib.libvirt.virt-aa-helper \
usr.libexec.geoclue \
usr.libexec.ibus-engine-hangul \
usr.libexec.ibus-setup-hangul \
usr.sbin.apt-cacher-ng \
usr.sbin.clamd \
usr.sbin.chronyd \
usr.sbin.cupsd \
usr.sbin.cups-browsed \
usr.sbin.haveged \
usr.sbin.libvirtd \
usr.sbin.mariadbd \
usr.sbin.named \
usr.sbin.unbound"
for profile_name in $PROFILES_NAMES; do
echo "Testing $profile_name"
/sbin/apparmor_parser \
--add \
--skip-cache \
--skip-kernel-load \
--verbose \
--warn=rule-downgraded \
--warn=rule-not-enforced \
"/etc/apparmor.d/$profile_name"
done
|
