felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(tunable): remove @{user_tmp_dirs} as it refers to different kind of temp folder.

Browse source
This commit is contained in:
Alexandre Pujol 2024-10-08 22:59:50 +01:00
parent 28706b2a78
commit 630e785787
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 6 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

12
apparmor.d/groups/gpg/gpg-agent
View file

@ -53,12 +53,12 @@ profile gpg-agent @{exec_path} {
owner @{run}/user/@{uid}/gnupg/S.gpg-agent{,.ssh,.browser,.extra} rw,
owner @{run}/user/@{uid}/gnupg/sshcontrol r,
owner @{user_tmp_dirs}/**/{.,}gnupg/ rw,
owner @{user_tmp_dirs}/**/{.,}gnupg/*.conf r,
owner @{user_tmp_dirs}/**/{.,}gnupg/private-keys-v1.d/ rw,
owner @{user_tmp_dirs}/**/{.,}gnupg/private-keys-v1.d/@{hex}.key{,.tmp} rw,
owner @{user_tmp_dirs}/**/{.,}gnupg/{,d.@{rand}/}S.gpg-agent{,.ssh,.browser,.extra} rw,
owner @{user_tmp_dirs}/**/{.,}gnupg/sshcontrol r,
owner @{tmp}/**/{.,}gnupg/ rw,
owner @{tmp}/**/{.,}gnupg/*.conf r,
owner @{tmp}/**/{.,}gnupg/private-keys-v1.d/ rw,
owner @{tmp}/**/{.,}gnupg/private-keys-v1.d/@{hex}.key{,.tmp} rw,
owner @{tmp}/**/{.,}gnupg/{,d.@{rand}/}S.gpg-agent{,.ssh,.browser,.extra} rw,
owner @{tmp}/**/{.,}gnupg/sshcontrol r,
#aa:only pacman
owner /etc/pacman.d/gnupg/ rw,