felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-07-03 14:09:25 +01:00
parent dec5a29e19
commit 11617131ce
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 57 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/freedesktop/xorg
View file

@ -28,10 +28,10 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
capability setgid,
capability setuid,
capability sys_admin,
capability sys_rawio,
# These can be denied?
#audit capability dac_override,
#audit capability sys_rawio,
#audit capability sys_nice,
#capability sys_tty_config,
@ -139,6 +139,7 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
@{PROC}/ioports r,
@{PROC}/mtrr rw,
/dev/fb[0-9] rw,
/dev/input/event[0-9]* rw,
/dev/shm/#[0-9]*[0-9] rw,
/dev/shm/shmfd-* rw,