felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix pipewrire & chromium.

Browse source
This commit is contained in:
Alexandre Pujol 2022-02-27 19:11:31 +00:00
parent 5d2d1a3524
commit 57dfcc758d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 9 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/browsers/chromium-chromium
View file

@ -28,6 +28,9 @@ profile chromium-chromium @{exec_path} flags=(attach_disconnected) {
include <abstractions/thumbnails-cache-read> include <abstractions/thumbnails-cache-read>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/chromium-common>
capability sys_ptrace,
ptrace (read) peer=chrome-gnome-shell, ptrace (read) peer=chrome-gnome-shell,

6
apparmor.d/profiles-m-r/pipewire
View file

@ -1,6 +1,6 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2015-2020 Mikhail Morfikov # Copyright (C) 2015-2022 Mikhail Morfikov
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>, abi <abi/3.0>,
@ -13,7 +13,7 @@ profile pipewire @{exec_path} {
include <abstractions/audio> include <abstractions/audio>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
ptrace (read) peer=pipewire*, ptrace (read),
@{exec_path} mr, @{exec_path} mr,

6
apparmor.d/profiles-m-r/pipewire-pulse
View file

@ -1,6 +1,6 @@
# apparmor.d - Full set of apparmor profiles # apparmor.d - Full set of apparmor profiles
# Copyright (C) 2015-2020 Mikhail Morfikov # Copyright (C) 2015-2022 Mikhail Morfikov
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>, abi <abi/3.0>,
@ -15,7 +15,7 @@ profile pipewire-pulse @{exec_path} flags=(attach_disconnected) {
capability sys_ptrace, capability sys_ptrace,
ptrace (read) peer=pipewire*, ptrace (read),
@{exec_path} mr, @{exec_path} mr,