Merge branch 'tunables' of https://github.com/nobody43/apparmor.d into nobody43-tunables
* 'tunables' of https://github.com/nobody43/apparmor.d: dbus temp tails Update apparmor.d Update gdm-runtime-config more unrelated changes adjust date-time random tails rename to int, convert more profiles fixes tunables
This commit is contained in:
parent
7b018a60bd
commit
557d905543
198 changed files with 560 additions and 507 deletions
|
|
@ -56,17 +56,17 @@ profile psi @{exec_path} {
|
|||
|
||||
owner @{HOME}/ r,
|
||||
owner @{user_cache_dirs}/ rw,
|
||||
owner @{user_cache_dirs}/#[0-9]*[0-9] rw,
|
||||
owner @{user_cache_dirs}/#@{int} rw,
|
||||
owner @{user_cache_dirs}/psi/{,**} rw,
|
||||
owner @{user_config_dirs}/autostart/psi.desktop rw,
|
||||
owner @{user_config_dirs}/psi/ rw,
|
||||
owner @{user_config_dirs}/psi/** rwkl -> @{user_config_dirs}/psi/#[0-9]*[0-9],
|
||||
owner @{user_config_dirs}/psi/** rwkl -> @{user_config_dirs}/psi/#@{int},
|
||||
owner @{user_config_dirs}/qt5ct/{,**} r,
|
||||
owner @{user_share_dirs}/psi/ rw,
|
||||
owner @{user_share_dirs}/psi/** rwk,
|
||||
|
||||
owner /tmp/#[0-9]*[0-9] rw,
|
||||
owner /tmp/Psi.* rwl -> /tmp/#[0-9]*[0-9],
|
||||
owner /tmp/#@{int} rw,
|
||||
owner /tmp/Psi.* rwl -> /tmp/#@{int},
|
||||
|
||||
@{run}/systemd/inhibit/[0-9]*.ref rw,
|
||||
|
||||
|
|
@ -75,7 +75,7 @@ profile psi @{exec_path} {
|
|||
deny @{PROC}/sys/kernel/random/boot_id r,
|
||||
deny owner @{PROC}/@{pid}/cmdline r,
|
||||
|
||||
/dev/shm/#[0-9]*[0-9] rw,
|
||||
/dev/shm/#@{int} rw,
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue