Profile update.

This commit is contained in:
Alexandre Pujol 2021-05-26 20:44:42 +01:00
parent 797701d0a0
commit 58978c12b7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
16 changed files with 28 additions and 12 deletions

View file

@ -17,6 +17,7 @@ profile gpg-agent @{exec_path} {
@{exec_path} mr,
/{usr/,}lib/gnupg/scdaemon rPx,
/{usr/,}bin/pinentry-* rPx,
/usr/share/gnupg/* r,
@ -47,9 +48,6 @@ profile gpg-agent @{exec_path} {
@{PROC}/@{pid}/fd/ r,
# PIN-entry apps
/{usr/,}bin/pinentry-* rPx,
# file_inherit
owner @{HOME}/.xsession-errors w,

View file

@ -24,6 +24,7 @@ profile gpgconf @{exec_path} {
/{usr/,}bin/pinentry-* rPx,
owner @{HOME}/@{XDG_GPG_DIR}/** rwkl -> @{HOME}/@{XDG_GPG_DIR}/**,
owner @{HOME}/@{XDG_PROJECTS_DIR}/**/gnupg/** rwkl -> @{HOME}/@{XDG_PROJECTS_DIR}/**/gnupg/**,
owner @{PROC}/@{pid}/task/@{tid}/stat rw,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,

View file

@ -16,6 +16,7 @@ profile gpgsm @{exec_path} {
deny /usr/bin/.gnupg/ w,
owner @{HOME}/@{XDG_GPG_DIR}/** rwkl -> @{HOME}/@{XDG_GPG_DIR}/**,
owner @{HOME}/@{XDG_PROJECTS_DIR}/**/gnupg/** rwkl -> @{HOME}/@{XDG_PROJECTS_DIR}/**,
owner /var/lib/*/.gnupg/** rwkl -> /var/lib/*/.gnupg/**,