feat(abs): general improvment.
This commit is contained in:
parent
63888f07a7
commit
21e8456383
9 changed files with 56 additions and 30 deletions
|
|
@ -50,6 +50,7 @@
|
|||
owner @{HOME}/.pki/nssdb/{cert9,key4}.db rwk,
|
||||
owner @{HOME}/.pki/nssdb/{cert9,key4}.db-journal rw,
|
||||
|
||||
owner @{user_config_dirs}/electron-flags.conf r,
|
||||
owner @{user_share_dirs}/.org.chromium.Chromium.@{rand6} rw,
|
||||
|
||||
owner @{tmp}/.org.chromium.Chromium.@{rand6} rw,
|
||||
|
|
@ -87,6 +88,8 @@
|
|||
owner @{PROC}/@{pid}/task/@{tid}/status r,
|
||||
owner @{PROC}/@{pid}/uid_map w, # If kernel.unprivileged_userns_clone = 1
|
||||
|
||||
deny @{user_share_dirs}/gvfs-metadata/* r,
|
||||
|
||||
include if exists <abstractions/common/electron.d>
|
||||
|
||||
# vim:syntax=apparmor
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue