felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables

Browse source 
* 'tunables' of https://github.com/nobody43/apparmor.d:
  dbus temp tails
  Update apparmor.d
  Update gdm-runtime-config
  more unrelated changes
  adjust date-time
  random tails
  rename to int, convert more profiles
  fixes
  tunables
This commit is contained in:
Alexandre Pujol 2023-08-17 20:01:53 +01:00
parent 7b018a60bd
commit 557d905543
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
198 changed files with 560 additions and 507 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/network/mullvad-gui
View file

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /opt/Mullvad*/mullvad-gui
profile mullvad-gui @{exec_path} flags=(attach_disconnected) {
profile mullvad-gui @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/chromium-common>
include <abstractions/dconf-write>
@ -51,7 +51,7 @@ profile mullvad-gui @{exec_path} flags=(attach_disconnected) {
owner @{user_cache_dirs}/dconf/user rw,
owner "/tmp/.org.chromium.Chromium.*/Mullvad VPN*.png" rw,
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[a-zA-z0-9]* r,
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} r,
@{run}/systemd/inhibit/*.ref rw,
@ -80,4 +80,4 @@ profile mullvad-gui @{exec_path} flags=(attach_disconnected) {
deny owner @{user_share_dirs}/gvfs-metadata/* r,
include if exists <local/mullvad-gui>
}
}