felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): fusermount: add mount, umount to fusermount.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-12 22:50:49 +02:00
parent 395306fb2a
commit 4b24cc3b1d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 7 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/abstractions/app/fusermount
View file

@ -17,8 +17,15 @@
@{bin}/fusermount{,3} mr, @{bin}/fusermount{,3} mr,
@{bin}/mount rix,
@{bin}/umount rix,
@{etc_ro}/fuse{,3}.conf r, @{etc_ro}/fuse{,3}.conf r,
@{run}/mount/utab r,
@{run}/mount/utab.* rwk,
@{PROC}/@{pid}/mountinfo r,
@{PROC}/@{pid}/mounts r, @{PROC}/@{pid}/mounts r,
/dev/fuse rw, /dev/fuse rw,

6
apparmor.d/groups/freedesktop/xdg-document-portal
View file

@ -77,14 +77,8 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
unix (send receive) type=stream peer=(label=xdg-document-portal), unix (send receive) type=stream peer=(label=xdg-document-portal),
@{bin}/mount rix,
@{bin}/umount rix,
owner @{run}/user/@{uid}/doc/ rw, owner @{run}/user/@{uid}/doc/ rw,
@{run}/mount/utab r,
@{run}/mount/utab.* rwk,
include if exists <local/xdg-document-portal_fusermount> include if exists <local/xdg-document-portal_fusermount>
} }

3
apparmor.d/groups/gvfs/gvfsd-fuse
View file

@ -49,9 +49,6 @@ profile gvfsd-fuse @{exec_path} {
unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse), unix (send,receive) type=stream addr=none peer=(label=gvfsd-fuse),
@{bin}/mount rix,
@{bin}/umount rix,
include if exists <local/gvfsd-fuse_fusermount> include if exists <local/gvfsd-fuse_fusermount>
} }