feat(profile): general update.

This commit is contained in:
Alexandre Pujol 2023-12-05 20:45:13 +00:00
parent bf973760fd
commit 319b976beb
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
47 changed files with 118 additions and 100 deletions

View file

@ -19,7 +19,7 @@ profile aa-enforce @{exec_path} {
@{bin}/ r,
@{bin}/apparmor_parser rPx,
/usr/share/terminfo/{,**} r,
/usr/share/terminfo/** r,
/etc/apparmor/logprof.conf r,
/etc/apparmor.d/{,**} rw,

View file

@ -25,18 +25,15 @@ profile aa-notify @{exec_path} {
/etc/apparmor/*.conf r,
/etc/inputrc r,
/usr/etc/inputrc.keys r,
/usr/share/terminfo/d/dumb r,
/usr/share/terminfo/x/xterm r,
/usr/share/terminfo/x/xterm-256color r,
/usr/share/terminfo/** r,
/var/log/audit/audit.log r,
owner @{HOME}/.inputrc r,
owner @{HOME}/.terminfo/@{int}/dumb r,
owner /tmp/*@{rand6} rw,
owner /tmp/@{rand8} rw,
owner /tmp/apparmor-bugreport-*.txt rw,
@{PROC}/ r,

View file

@ -18,7 +18,7 @@ profile aa-teardown @{exec_path} {
@{bin}/{,ba,da}sh rix,
@{lib}/apparmor/apparmor.systemd rPx,
/usr/share/terminfo/x/* r,
/usr/share/terminfo/** r,
/dev/tty rw,

View file

@ -40,8 +40,8 @@ profile atril @{exec_path} {
@{bin}/atril-previewer rPx,
@{lib}/@{multiarch}/webkit2gtk-4.0/WebKitNetworkProcess rix,
@{lib}/@{multiarch}/webkit2gtk-4.0/WebKitWebProcess rix,
@{lib}/{,@{multiarch}/}webkit2gtk-*/WebKitNetworkProcess rix,
@{lib}/{,@{multiarch}/}webkit2gtk-*/WebKitWebProcess rix,
/usr/share/atril/{,**} r,
/usr/share/poppler/{,**} r,

View file

@ -21,7 +21,7 @@ profile code-extension-git-askpass @{exec_path} {
@{bin}/rm rix,
@{lib}/electron@{int}/electron rix,
/usr/share/terminfo/x/xterm-256color r,
/usr/share/terminfo/** r,
owner /tmp/tmp.* rw,

View file

@ -21,7 +21,7 @@ profile dmesg @{exec_path} {
@{bin}/less rPx -> child-pager,
/dev/kmsg r,
/usr/share/terminfo/{,**} r,
/usr/share/terminfo/** r,
deny /{usr/,}local/bin/ r,
deny @{bin}/{,*/} r,