felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): rewrite user-read/user-write.

Browse source 
See #307
This commit is contained in:
Alexandre Pujol 2024-03-28 16:47:40 +00:00
parent b089a4d2c5
commit 2fc2394bad
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
18 changed files with 96 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/profiles-a-f/evince
View file

@ -18,8 +18,8 @@ profile evince @{exec_path} {
include <abstractions/ibus>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/user-read>
include <abstractions/user-write>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
# also denies network mounts
deny network inet,

4
apparmor.d/profiles-a-f/file-roller
View file

@ -15,9 +15,11 @@ profile file-roller @{exec_path} {
include <abstractions/bus/org.freedesktop.portal.Desktop>
include <abstractions/dconf-write>
include <abstractions/desktop>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/user-write>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
#aa:dbus own bus=session name=org.gnome.ArchiveManager1
#aa:dbus own bus=session name=org.gnome.FileRoller