felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refractor(profiles): unify the name of the local variables.

Browse source
This commit is contained in:
Alexandre Pujol 2023-09-13 20:55:20 +01:00
parent 57f914d7fd
commit 2d2693bd99
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
20 changed files with 166 additions and 166 deletions
Download patch file Download diff file Expand all files Collapse all files

40
apparmor.d/abstractions/chromium
View file

@ -6,11 +6,11 @@
# (like electron) use abstractions/chromium-common instead.
# This abstraction requires the following variables definied in the profile header:
# @{chromium_name} = chromium
# @{chromium_domain} = org.chromium.Chromium
# @{chromium_lib_dirs} = @{lib}/chromium
# @{chromium_config_dirs} = @{user_config_dirs}/chromium
# @{chromium_cache_dirs} = @{user_cache_dirs}/chromium
# @{name} = chromium
# @{domain} = org.chromium.Chromium
# @{lib_dirs} = @{lib}/chromium
# @{config_dirs} = @{user_config_dirs}/chromium
# @{cache_dirs} = @{user_cache_dirs}/chromium
abi <abi/3.0>,
@ -55,9 +55,9 @@
network inet6 stream,
network netlink raw,
@{chromium_lib_dirs}/{,**} r,
@{chromium_lib_dirs}/chrome_crashpad_handler rPx,
@{chromium_lib_dirs}/chrome-sandbox rPx,
@{lib_dirs}/{,**} r,
@{lib_dirs}/chrome_crashpad_handler rPx,
@{lib_dirs}/chrome-sandbox rPx,
# Desktop integration
@{bin}/lsb_release rPx -> lsb_release,
@ -87,14 +87,14 @@
@{bin}/chrome-gnome-shell rPx,
@{bin}/gnome-browser-connector-host rPx,
/usr/share/@{chromium_name}/{,**} r,
/usr/share/@{name}/{,**} r,
/usr/share/chromium/extensions/{,**} r,
/usr/share/egl/{,**} r,
/usr/share/libdrm/*.ids r,
/usr/share/mozilla/extensions/{,**} r,
/usr/share/webext/{,**} r,
/etc/@{chromium_name}/{,**} r,
/etc/@{name}/{,**} r,
/etc/fstab r,
/etc/libva.conf r,
/etc/opensc.conf r,
@ -115,13 +115,13 @@
owner @{user_config_dirs}/ r,
owner @{user_config_dirs}/gtk-3.0/servers r,
owner @{user_share_dirs}/ r,
owner @{user_share_dirs}/.@{chromium_domain}.* rw,
owner @{user_share_dirs}/.@{domain}.* rw,
owner @{chromium_config_dirs}/ rw,
owner @{chromium_config_dirs}/** rwk,
owner @{chromium_config_dirs}/WidevineCdm/*/_platform_specific/linux_*/libwidevinecdm.so mrw,
owner @{config_dirs}/ rw,
owner @{config_dirs}/** rwk,
owner @{config_dirs}/WidevineCdm/*/_platform_specific/linux_*/libwidevinecdm.so mrw,
owner @{chromium_cache_dirs}/{,**} rw,
owner @{cache_dirs}/{,**} rw,
# For importing data (bookmarks, cookies, etc) from Firefox
# owner @{HOME}/.mozilla/firefox/profiles.ini r,
@ -135,16 +135,16 @@
/tmp/ r,
/var/tmp/ r,
owner /tmp/.@{chromium_domain}.* rw,
owner /tmp/.@{chromium_domain}*/{,**} rw,
owner /tmp/@{chromium_name}-crashlog-@{int}-@{int}.txt rw,
owner /tmp/.@{domain}.* rw,
owner /tmp/.@{domain}*/{,**} rw,
owner /tmp/@{name}-crashlog-@{int}-@{int}.txt rw,
owner /tmp/scoped_dir*/{,**} rw,
owner /tmp/tmp.* rw,
owner /tmp/tmp.*/ rw,
owner /tmp/tmp.*/** rwk,
/dev/shm/ r,
owner /dev/shm/.@{chromium_domain}* rw,
owner /dev/shm/.@{domain}* rw,
@{PROC}/ r,
@{PROC}/@{pid}/fd/ r,
@ -198,7 +198,7 @@
owner /dev/tty@{int} rw,
# Silencer
deny @{chromium_lib_dirs}/** w,
deny @{lib_dirs}/** w,
deny @{user_share_dirs}/gvfs-metadata/* r,
include if exists <abstractions/chromium.d>