felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix denials on different distros

Browse source
This commit is contained in:
doublez13 2024-02-05 12:11:54 -07:00 • committed by GitHub
parent 36a3310a9d
commit 6aa2a7c9de
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 14 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

28
apparmor.d/profiles-m-r/mutt
View file

@ -25,22 +25,21 @@ profile mutt @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
# Mutt config files # Mutt config files
/usr/share/mutt/** r, /usr/share/mutt/** r,
/etc/{mutt/,}Muttrc r, /etc/{mutt/,}Muttrc r,
owner @{HOME}/.mutt/** r, /etc/{mutt/,}Muttrc.d/{*,} r,
owner @{HOME}/.muttrc* r, owner @{HOME}/.mutt/** r,
owner @{HOME}/.muttrc* r,
owner @{HOME}/.cache/mutt rwk, owner @{HOME}/.cache/mutt rwk,
# Used When viewing attachments # Used When viewing attachments
owner /tmp/* lrw, owner /tmp/* lrw,
#Needed to open a mailbox (at least an imap one) # Needed to compose a message
owner /tmp/.mutt*/ rw, owner /{var/,}tmp/.mutt*/ rw,
owner /tmp/.mutt*/* lrwk, owner /{var/,}tmp/.mutt*/* lrwk,
owner /{var/,}tmp/mutt* lrwk,
# Might be able to get away without this
owner /tmp/mutt* lrwk,
# Needed for the edit operation. # Needed for the edit operation.
@{HOME}/ r, @{HOME}/ r,
@ -89,6 +88,7 @@ profile mutt @{exec_path} {
@{bin}/w3m rCx -> html-renderer, @{bin}/w3m rCx -> html-renderer,
@{bin}/lynx rCx -> html-renderer, @{bin}/lynx rCx -> html-renderer,
@{bin}/vim rCx -> editor, @{bin}/vim rCx -> editor,
@{bin}/vim.* rCx -> editor,
@{bin}/sensible-editor rCx -> editor, @{bin}/sensible-editor rCx -> editor,
@{bin}/more rCx -> pager, @{bin}/more rCx -> pager,
@{bin}/less rCx -> pager, @{bin}/less rCx -> pager,
@ -105,7 +105,7 @@ profile mutt @{exec_path} {
owner @{HOME}/.w3m/* rw, owner @{HOME}/.w3m/* rw,
owner /tmp/mutt* rw, owner /{var/,}tmp/mutt* rw,
include if exists <local/mutt_html-renderer> include if exists <local/mutt_html-renderer>
} }
@ -136,7 +136,7 @@ profile mutt @{exec_path} {
owner @{HOME}/.cache/vim/** wr, owner @{HOME}/.cache/vim/** wr,
# This is the file that holds the message # This is the file that holds the message
owner /tmp/mutt* rw, owner /{var/,}tmp/{.,}mutt* rw,
include if exists <local/mutt_editor> include if exists <local/mutt_editor>
} }
@ -157,7 +157,7 @@ profile mutt @{exec_path} {
/usr/share/file/misc/magic.mgc r, /usr/share/file/misc/magic.mgc r,
# This is the file that holds the message # This is the file that holds the message
owner /tmp/mutt* rw, owner /{var/,}tmp/mutt* rw,
include if exists <local/mutt_pager> include if exists <local/mutt_pager>
} }
@ -172,7 +172,7 @@ profile mutt @{exec_path} {
owner @{HOME}/@{XDG_GPG_DIR}/ rw, owner @{HOME}/@{XDG_GPG_DIR}/ rw,
owner @{HOME}/@{XDG_GPG_DIR}/** rwkl -> @{HOME}/@{XDG_GPG_DIR}/**, owner @{HOME}/@{XDG_GPG_DIR}/** rwkl -> @{HOME}/@{XDG_GPG_DIR}/**,
owner /tmp/mutt* lrw, owner /{var/,}tmp/mutt* lrw,
include if exists <local/mutt_gpg> include if exists <local/mutt_gpg>
} }