update apparmor profiles
This commit is contained in:
parent
f73da4a046
commit
503cf496bf
218 changed files with 1445 additions and 1502 deletions
|
|
@ -48,32 +48,29 @@ profile atom @{exec_path} {
|
|||
|
||||
deny /{usr/,}local/bin/ r,
|
||||
deny /{usr/,}bin/ r,
|
||||
#/{usr/,}bin/bash rix,
|
||||
#/{usr/,}bin/zsh rix,
|
||||
#/{usr/,}bin/env rix,
|
||||
#/{usr/,}bin/rmdir rix,
|
||||
#/{usr/,}bin/{,e}grep rix,
|
||||
#/{usr/,}bin/ls rix,
|
||||
#/{usr/,}bin/gawk rix,
|
||||
#/{usr/,}bin/tty rix,
|
||||
#/{usr/,}bin/dircolors rix,
|
||||
#/{usr/,}bin/cut rix,
|
||||
#/{usr/,}bin/xwininfo rix,
|
||||
#/{usr/,}bin/date rix,
|
||||
#/{usr/,}bin/{,ba,da}sh rix,
|
||||
#/{usr/,}bin/zsh rix,
|
||||
#/{usr/,}bin/env rix,
|
||||
#/{usr/,}bin/rmdir rix,
|
||||
#/{usr/,}bin/{,e}grep rix,
|
||||
#/{usr/,}bin/ls rix,
|
||||
#/{usr/,}bin/gawk rix,
|
||||
#/{usr/,}bin/tty rix,
|
||||
#/{usr/,}bin/dircolors rix,
|
||||
#/{usr/,}bin/cut rix,
|
||||
#/{usr/,}bin/xwininfo rix,
|
||||
#/{usr/,}bin/date rix,
|
||||
# The expr and uname tools are needed or Atom won't start with the following error:
|
||||
# Your platform () is not supported.
|
||||
/{usr/,}bin/expr rix,
|
||||
/{usr/,}bin/uname rix,
|
||||
/{usr/,}bin/expr rix,
|
||||
/{usr/,}bin/uname rix,
|
||||
# The following also are needed to start Atom
|
||||
/{usr/,}bin/basename rix,
|
||||
/{usr/,}bin/readlink rix,
|
||||
/{usr/,}bin/dirname rix,
|
||||
/{usr/,}bin/mkdir rix,
|
||||
/{usr/,}bin/nohup rix,
|
||||
/{usr/,}bin/cat rix,
|
||||
# The dash shell is needed to install packages. If you don't want to install any, coment the
|
||||
# following line out.
|
||||
#/{usr/,}bin/dash rix,
|
||||
/{usr/,}bin/basename rix,
|
||||
/{usr/,}bin/readlink rix,
|
||||
/{usr/,}bin/dirname rix,
|
||||
/{usr/,}bin/mkdir rix,
|
||||
/{usr/,}bin/nohup rix,
|
||||
/{usr/,}bin/cat rix,
|
||||
|
||||
/{usr/,}bin/lsb_release rPx -> child-lsb_release,
|
||||
/{usr/,}bin/xdg-open rCx -> open,
|
||||
|
|
@ -194,6 +191,10 @@ profile atom @{exec_path} {
|
|||
|
||||
/{usr/,}bin/xdg-open mr,
|
||||
|
||||
owner @{HOME}/ r,
|
||||
|
||||
owner @{run}/user/[0-9]*/ r,
|
||||
|
||||
# Allowed apps to open
|
||||
/{usr/,}lib/firefox/firefox rPUx,
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue