felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): replace old [0-9]* glob by @{int}

Browse source 
Beware some [0-9]* glob are actually not proper @{int}.
This commit is contained in:
Alexandre Pujol 2023-08-18 17:09:53 +01:00
parent 8ea4491a56
commit 275d6b6e62
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
368 changed files with 637 additions and 636 deletions
Download patch file Download diff file Expand all files Collapse all files

18
apparmor.d/groups/browsers/firefox
View file

@ -185,8 +185,8 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
owner @{HOME}/ r,
owner @{user_cache_dirs}/ rw,
owner @{user_cache_dirs}/gstreamer-[0-9]*/ rw,
owner @{user_cache_dirs}/gstreamer-[0-9]*/registry.*.bin{,.tmp*} rw,
owner @{user_cache_dirs}/gstreamer-@{int}/ rw,
owner @{user_cache_dirs}/gstreamer-@{int}/registry.*.bin{,.tmp*} rw,
owner @{user_config_dirs}/ r,
owner @{user_config_dirs}/gtk-{3,4}.0/assets/*.svg r,
@ -237,7 +237,7 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
@{sys}/class/**/ r,
@{sys}/devices/**/uevent r,
@{sys}/devices/pci[0-9]*/**/ r,
@{sys}/devices/pci[0-9]*/**/drm/card[0-9]*/ r,
@{sys}/devices/pci[0-9]*/**/drm/card@{int}/ r,
@{sys}/devices/pci[0-9]*/**/drm/renderD[0-9]*/ r,
@{sys}/devices/pci[0-9]*/**/irq r,
@{sys}/devices/system/cpu/cpu[0-9]/cache/index[0-9]/size r,
@ -269,15 +269,15 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
owner @{PROC}/@{pids}/environ r,
/dev/ r,
/dev/hidraw[0-9]* rw,
/dev/hidraw@{int} rw,
/dev/shm/ r,
/dev/tty rw,
/dev/video[0-9]* rw,
owner /dev/dri/card[0-9]* rw, # File Inherit
/dev/video@{int} rw,
owner /dev/dri/card@{int} rw, # File Inherit
owner /dev/shm/org.chromium.* rw,
owner /dev/shm/org.mozilla.ipc.@{pid}.[0-9]* rw,
owner /dev/shm/wayland.mozilla.ipc.[0-9]* rw,
owner /dev/tty[0-9]* rw, # File Inherit
owner /dev/shm/org.mozilla.ipc.@{pid}.@{int} rw,
owner /dev/shm/wayland.mozilla.ipc.@{int} rw,
owner /dev/tty@{int} rw, # File Inherit
# X-tiny
/tmp/.X0-lock r,