felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): chromium_install_dirs -> chromium_lib_dirs

Browse source
This commit is contained in:
Alexandre Pujol 2023-02-04 19:08:02 +00:00
parent e9d61fb7d9
commit 6061d4981b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
12 changed files with 46 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/abstractions/chromium
View file

@ -8,7 +8,7 @@
# This abstraction requires the following variables definied in the profile header:
# @{chromium_name} = chromium
# @{chromium_domain} = org.chromium.Chromium
# @{chromium_install_dirs} = /{usr/,}lib/chromium
# @{chromium_lib_dirs} = /{usr/,}lib/chromium
# @{chromium_config_dirs} = @{user_config_dirs}/chromium
# @{chromium_cache_dirs} = @{user_cache_dirs}/chromium
@ -54,9 +54,9 @@
network inet6 stream,
network netlink raw,
@{chromium_install_dirs}/{,**} r,
@{chromium_install_dirs}/chrome_crashpad_handler rPx,
@{chromium_install_dirs}/chrome-sandbox rPx,
@{chromium_lib_dirs}/{,**} r,
@{chromium_lib_dirs}/chrome_crashpad_handler rPx,
@{chromium_lib_dirs}/chrome-sandbox rPx,
# Desktop integration
/{usr/,}bin/lsb_release rPx -> lsb_release,
@ -204,7 +204,7 @@
owner /dev/tty[0-9]* rw,
# Silencer
deny @{chromium_install_dirs}/** w,
deny @{chromium_lib_dirs}/** w,
deny @{user_share_dirs}/gvfs-metadata/* r,
include if exists <abstractions/chromium.d>