felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): minor improvment on wechat profiles

Browse source
This commit is contained in:
Alexandre Pujol 2025-03-23 16:53:38 +01:00
parent 11fc80663f
commit 310f06bc03
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 14 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

26
apparmor.d/profiles-s-z/wechat-appimage
View file

@ -26,9 +26,9 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
network inet6 dgram, network inet6 dgram,
network inet6 stream, network inet6 stream,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat??????/, mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat@{word6}/,
umount @{tmp}/.mount_wechat??????/, umount @{tmp}/.mount_wechat@{word6}/,
@{exec_path} r, @{exec_path} r,
@ -37,11 +37,11 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
/tmp/.mount_wechat??????/AppRun ix, /tmp/.mount_wechat??????/AppRun ix,
@{bin}/mkdir ix, @{bin}/mkdir ix,
@{bin}/gawk rix, @{bin}/gawk rix,
@{bin}/lsblk rix, @{bin}/lsblk rPx,
@{bin}/ip rix, @{bin}/ip rix,
@{bin}/xdg-user-dir rix, @{bin}/xdg-user-dir rix,
@{tmp}/.mount_wechat??????/opt/wechat/{,**} ix, @{tmp}/.mount_wechat@{word6}/opt/wechat/{,**} ix,
@{tmp}/.mount_wechat??????/usr/bin/wechat ix, @{tmp}/.mount_wechat@{word6}/usr/bin/wechat ix,
@{open_path} rpx -> child-open-strict, @{open_path} rpx -> child-open-strict,
@{bin}/fusermount{,3} Cx -> fusermount, @{bin}/fusermount{,3} Cx -> fusermount,
@ -49,18 +49,15 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
@{bin}/readlink rix, @{bin}/readlink rix,
@{bin}/ r, @{bin}/ r,
@{bin}/core_perl/ r, @{bin}/*/ r,
@{bin}/site_perl/ r,
@{bin}/vendor_perl/ r,
/usr/local/bin/ r, /usr/local/bin/ r,
/usr/local/sbin/ r, /usr/local/sbin/ r,
/etc/machine-id r, /etc/machine-id r,
@{tmp}/.mount_wechat??????/AppRun r, @{tmp}/.mount_wechat@{word6}/AppRun r,
@{tmp}/.mount_wechat??????/ rw, @{tmp}/.mount_wechat@{word6}/ rw,
@{tmp}/.mount_wechat??????/opt/wechat/{,**} mr, @{tmp}/.mount_wechat@{word6}/opt/wechat/{,**} mr,
owner /var/tmp/etilqs_* rw, owner /var/tmp/etilqs_* rw,
@ -79,9 +76,9 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
capability dac_read_search, capability dac_read_search,
capability sys_admin, capability sys_admin,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat??????/, mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat@{word6}/,
umount @{tmp}/.mount_wechat??????/, umount @{tmp}/.mount_wechat@{word6}/,
@{bin}/fusermount{,3} mr, @{bin}/fusermount{,3} mr,
@ -92,6 +89,7 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
/etc/fuse.conf r, /etc/fuse.conf r,
/dev/fuse rw, /dev/fuse rw,
include if exists <local/wechat-appimage_fusermount> include if exists <local/wechat-appimage_fusermount>
} }

3
dists/flags/main.flags
View file

@ -368,7 +368,8 @@ virtnodedevd attach_disconnected,complain
virtsecretd attach_disconnected,complain virtsecretd attach_disconnected,complain
virtstoraged attach_disconnected,complain virtstoraged attach_disconnected,complain
waybar attach_disconnected,complain waybar attach_disconnected,complain
wg complain wechat attach_disconnected,complain
wechat-appimage attach_disconnected,complain
wg-quick complain wg-quick complain
wsdd complain wsdd complain
xdg-dbus-proxy attach_disconnected,complain xdg-dbus-proxy attach_disconnected,complain