felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Some small fixes

Browse source
This commit is contained in:
EricLin0509 2024-09-02 21:21:47 +08:00
parent 0897463e97
commit 4f3a8588dc
No known key found for this signature in database
GPG key ID: FAE58F51A269B319
1 changed files with 10 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

26
apparmor.d/profiles-s-z/wemeet
View file

@ -14,11 +14,9 @@ profile wemeet @{exec_path} flags=(attach_disconnected) {
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/common/bwrap> include <abstractions/common/bwrap>
include <abstractions/common/chromium> include <abstractions/common/chromium>
include <abstractions/X-strict> include <abstractions/graphics>
include <abstractions/mesa>
include <abstractions/vulkan-strict>
include <abstractions/dri>
include <abstractions/desktop> include <abstractions/desktop>
include <abstractions/ssl_certs>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/audio-client> include <abstractions/audio-client>
@ -29,26 +27,20 @@ profile wemeet @{exec_path} flags=(attach_disconnected) {
network inet6 dgram, network inet6 dgram,
network inet6 stream, network inet6 stream,
@{exec_path} mr,
@{sh_path} r, @{sh_path} r,
@{bin}/basename rix, @{bin}/basename rix,
@{bin}/bwrap rix, @{bin}/bwrap rix,
@{bin}/id rix, @{bin}/id rix,
@{bin}/mkdir rix, @{bin}/mkdir rix,
/opt/wemeet/bin/** rix,
@{exec_path} mr,
/usr/share/hwdata/pnp.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
/etc/machine-id r, /etc/machine-id r,
/usr/share/ca-certificates/trust-source/{,**} r,
/etc/ca-certificates/extracted/tls-ca-bundle.pem r,
/etc/ca-certificates/trust-source/{,**} r,
/var/cache/ w, /var/cache/ w,
# wemeet specifics owner @{user_share_dirs}/wemeetapp/ rw,
/opt/wemeet/bin/** rix, owner @{user_share_dirs}/wemeetapp/** rwlk -> @{user_share_dirs}/wemeetapp/**,
owner @{user_share_dirs}/wemeetapp/{,**} rwk,
@{PROC}/ r, @{PROC}/ r,
@{PROC}/asound/ r, @{PROC}/asound/ r,
@ -62,7 +54,9 @@ profile wemeet @{exec_path} flags=(attach_disconnected) {
/dev/ r, /dev/ r,
/dev/tty rw, /dev/tty rw,
/dev/shm/ r, /dev/shm/ r,
/dev/pts/[0-9]* rw, /dev/pts/@{int} rw,
include if exists <local/wemeet>
} }