felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): minor improvment on wechat profiles

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-23 16:53:38 +01:00
parent 11fc80663f
commit 310f06bc03
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 14 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

26
apparmor.d/profiles-s-z/wechat-appimage
View file

@ -26,9 +26,9 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
network inet6 dgram,
network inet6 stream,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat??????/,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat@{word6}/,
umount @{tmp}/.mount_wechat??????/,
umount @{tmp}/.mount_wechat@{word6}/,
@{exec_path} r,
@ -37,11 +37,11 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
/tmp/.mount_wechat??????/AppRun ix,
@{bin}/mkdir ix,
@{bin}/gawk rix,
@{bin}/lsblk rix,
@{bin}/lsblk rPx,
@{bin}/ip rix,
@{bin}/xdg-user-dir rix,
@{tmp}/.mount_wechat??????/opt/wechat/{,**} ix,
@{tmp}/.mount_wechat??????/usr/bin/wechat ix,
@{tmp}/.mount_wechat@{word6}/opt/wechat/{,**} ix,
@{tmp}/.mount_wechat@{word6}/usr/bin/wechat ix,
@{open_path} rpx -> child-open-strict,
@{bin}/fusermount{,3} Cx -> fusermount,
@ -49,18 +49,15 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
@{bin}/readlink rix,
@{bin}/ r,
@{bin}/core_perl/ r,
@{bin}/site_perl/ r,
@{bin}/vendor_perl/ r,
@{bin}/*/ r,
/usr/local/bin/ r,
/usr/local/sbin/ r,
/etc/machine-id r,
@{tmp}/.mount_wechat??????/AppRun r,
@{tmp}/.mount_wechat??????/ rw,
@{tmp}/.mount_wechat??????/opt/wechat/{,**} mr,
@{tmp}/.mount_wechat@{word6}/AppRun r,
@{tmp}/.mount_wechat@{word6}/ rw,
@{tmp}/.mount_wechat@{word6}/opt/wechat/{,**} mr,
owner /var/tmp/etilqs_* rw,
@ -79,9 +76,9 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
capability dac_read_search,
capability sys_admin,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat??????/,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat@{word6}/,
umount @{tmp}/.mount_wechat??????/,
umount @{tmp}/.mount_wechat@{word6}/,
@{bin}/fusermount{,3} mr,
@ -92,6 +89,7 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
/etc/fuse.conf r,
/dev/fuse rw,
include if exists <local/wechat-appimage_fusermount>
}

3
dists/flags/main.flags
View file

@ -368,7 +368,8 @@ virtnodedevd attach_disconnected,complain
virtsecretd attach_disconnected,complain
virtstoraged attach_disconnected,complain
waybar attach_disconnected,complain
wg complain
wechat attach_disconnected,complain
wechat-appimage attach_disconnected,complain
wg-quick complain
wsdd complain
xdg-dbus-proxy attach_disconnected,complain