felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): restrict some access to @{PROC}/@{pid}.

Browse source
This commit is contained in:
Alexandre Pujol 2024-09-25 14:00:29 +01:00
parent 90a8e44d20
commit 28b32f1ae3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 31 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/profiles-a-f/alacarte
View file

@ -30,6 +30,7 @@ profile alacarte @{exec_path} {
owner @{tmp}/gdkpixbuf-xpm-tmp.@{rand6} rw,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/mounts r,
include if exists <local/alacarte>