felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-11-29 12:02:38 +00:00
parent d52a7bd52a
commit 1e5d90afe8
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
19 changed files with 78 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

11
apparmor.d/groups/browsers/chromium-chromium
View file

@ -15,6 +15,7 @@ profile chromium-chromium @{exec_path} flags=(attach_disconnected) {
include <abstractions/audio>
include <abstractions/chromium-common>
include <abstractions/dconf-write>
include <abstractions/devices-usb>
include <abstractions/fontconfig-cache-read>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
@ -111,9 +112,10 @@ profile chromium-chromium @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/wayland-cursor-shared-* rw,
owner /tmp/scoped_dir*/{,**} rw,
owner /tmp/tmp.* rw,
owner /tmp/tmp.*/ rw,
owner /tmp/tmp.*/** rwk,
owner /tmp/scoped_dir*/{,**} rw,
@{PROC}/ r,
@{PROC}/@{pid}/fd/ r,
@ -142,12 +144,10 @@ profile chromium-chromium @{exec_path} flags=(attach_disconnected) {
@{sys}/class/ r,
@{sys}/class/**/ r,
@{sys}/devices/**/uevent r,
@{sys}/devices/pci[0-9]*/**/{in_intensity_sampling_frequency,in_intensity_scale,in_illuminance_raw} r,
@{sys}/devices/pci[0-9]*/**/boot_vga r,
@{sys}/devices/pci[0-9]*/**/irq r,
@{sys}/devices/pci[0-9]*/**/report_descriptor r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/{,**/}{busnum,devnum} r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/{,**/}{descriptors,manufacturer,product,serial,bConfigurationValue} r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/**/{idProduct,idVendor,interface} r,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_max_freq r,
@{sys}/devices/virtual/**/report_descriptor r,
@{sys}/devices/virtual/dmi/id/product_name r,
@ -155,8 +155,9 @@ profile chromium-chromium @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/virtual/tty/tty[0-9]/active r,
/dev/ r,
/dev/video[0-9]* rw,
/dev/hidraw[0-9]* rw,
/dev/tty rw,
/dev/video[0-9]* rw,
# file_inherit
owner /dev/tty[0-9]* rw,