update apparmor profiles
This commit is contained in:
parent
efda369670
commit
2a6b2bd189
70 changed files with 221 additions and 144 deletions
|
|
@ -52,7 +52,7 @@ profile android-studio @{exec_path} {
|
|||
|
||||
/{usr/,}bin/python3.[0-9]* rix,
|
||||
|
||||
/{usr/,}bin/which rix,
|
||||
/{usr/,}bin/which{,.debianutils} rix,
|
||||
/{usr/,}bin/uname rix,
|
||||
/{usr/,}bin/{,e}grep rix,
|
||||
/{usr/,}bin/cut rix,
|
||||
|
|
|
|||
|
|
@ -44,8 +44,8 @@ profile code @{exec_path} {
|
|||
#/{usr/,}bin/{,e}grep rix,
|
||||
#/{usr/,}bin/id rix,
|
||||
#/{usr/,}bin/readlink rix,
|
||||
#/{usr/,}bin/which rix,
|
||||
#/{usr/,}{s,}bin/ifconfig rix,
|
||||
#/{usr/,}bin/which{,.debianutils} rix,
|
||||
#/{usr/,}sbin/ifconfig rix,
|
||||
|
||||
/{usr/,}bin/lsb_release rPx -> child-lsb_release,
|
||||
|
||||
|
|
|
|||
|
|
@ -113,6 +113,8 @@ profile freetube @{exec_path} {
|
|||
|
||||
# Allowed apps to open
|
||||
/{usr/,}lib/firefox/firefox rPx,
|
||||
/{usr/,}bin/mpv rPx,
|
||||
/{usr/,}bin/vlc rPx,
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
|
|
@ -135,6 +137,8 @@ profile freetube @{exec_path} {
|
|||
|
||||
# Allowed apps to open
|
||||
/{usr/,}lib/firefox/firefox rPx,
|
||||
/{usr/,}bin/mpv rPx,
|
||||
/{usr/,}bin/vlc rPx,
|
||||
|
||||
# file_inherit
|
||||
owner @{HOME}/.xsession-errors w,
|
||||
|
|
|
|||
|
|
@ -36,7 +36,7 @@ profile telegram-desktop @{exec_path} {
|
|||
network netlink dgram,
|
||||
network netlink raw,
|
||||
|
||||
@{exec_path} mr,
|
||||
@{exec_path} mrix,
|
||||
|
||||
/{usr/,}bin/{,ba,da}sh rix,
|
||||
|
||||
|
|
@ -77,9 +77,13 @@ profile telegram-desktop @{exec_path} {
|
|||
|
||||
/usr/share/hwdata/pnp.ids r,
|
||||
|
||||
owner @{HOME}/.config/qt5ct/{,**} r,
|
||||
/usr/share/qt5ct/** r,
|
||||
|
||||
# Allowed apps to open
|
||||
/{usr/,}lib/firefox/firefox rPx,
|
||||
/{usr/,}bin/smplayer rPx,
|
||||
/{usr/,}bin/viewnior rPUx,
|
||||
/{usr/,}bin/qpdfview rPx,
|
||||
/{usr/,}bin/geany rPx,
|
||||
|
||||
|
|
@ -106,6 +110,7 @@ profile telegram-desktop @{exec_path} {
|
|||
/{usr/,}lib/firefox/firefox rPx,
|
||||
/{usr/,}bin/smplayer rPx,
|
||||
/{usr/,}bin/qpdfview rPx,
|
||||
/{usr/,}bin/viewnior rPUx,
|
||||
/{usr/,}bin/geany rPx,
|
||||
|
||||
# file_inherit
|
||||
|
|
|
|||
|
|
@ -56,7 +56,7 @@ profile thunderbird @{exec_path} {
|
|||
/{usr/,}bin/sed rix,
|
||||
/{usr/,}bin/date rix,
|
||||
/{usr/,}bin/tr rix,
|
||||
/{usr/,}bin/which rix,
|
||||
/{usr/,}bin/which{,.debianutils} rix,
|
||||
|
||||
/{usr/,}bin/ps rPx,
|
||||
/{usr/,}bin/dig rix,
|
||||
|
|
|
|||
|
|
@ -158,7 +158,7 @@ profile vlc @{exec_path} {
|
|||
/{usr/,}bin/mv rix,
|
||||
/{usr/,}bin/{,e}grep rix,
|
||||
/{usr/,}bin/sed rix,
|
||||
/{usr/,}bin/which rix,
|
||||
/{usr/,}bin/which{,.debianutils} rix,
|
||||
/{usr/,}bin/xset rix,
|
||||
/{usr/,}bin/xautolock rix,
|
||||
/{usr/,}bin/dbus-send rix,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue