felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): cleanup and remove open subprofile when it is useless.

Browse source
This commit is contained in:
Alexandre Pujol 2024-10-06 15:46:07 +01:00
parent 36f620dab1
commit 105a9b4def
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 111 additions and 482 deletions
Download patch file Download diff file Expand all files Collapse all files

35
apparmor.d/groups/apt/querybts
View file

@ -33,7 +33,7 @@ profile querybts @{exec_path} {
@{bin}/stty rix,
@{bin}/ldconfig rix,
@{bin}/xdg-open rCx -> open,
@{open_path} rPx -> child-open-browsers,
@{bin}/dpkg rPx -> child-dpkg,
@ -46,41 +46,14 @@ profile querybts @{exec_path} {
/etc/dpkg/origins/ r,
/etc/dpkg/origins/debian r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/fd/ r,
/etc/fstab r,
/var/lib/dbus/machine-id r,
/etc/machine-id r,
# Allowed apps to open
@{lib}/firefox/firefox rPUx,
profile open {
include <abstractions/base>
include <abstractions/xdg-open>
@{bin}/xdg-open mr,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,
owner @{HOME}/ r,
owner @{run}/user/@{uid}/ r,
# Allowed apps to open
@{lib}/firefox/firefox rPUx,
# file_inherit
owner @{HOME}/.xsession-errors w,
}
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/fd/ r,
include if exists <local/querybts>
}