felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update profiles for apparmor3

Browse source
This commit is contained in:
Mikhail Morfikov 2020-12-10 22:33:39 +01:00
parent 503cf496bf
commit 7067edcf70
No known key found for this signature in database
GPG key ID: 32D9CB634796CCA1
776 changed files with 6867 additions and 5199 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/chromium-chrome-sandbox
View file

@ -9,9 +9,9 @@
#
# ------------------------------------------------------------------
#abi <abi/3.0>,
abi <abi/3.0>,
#include <tunables/global>
include <tunables/global>
@{CHROMIUM_INSTALLDIR} = /{usr/,}lib/chromium
@{CHROMIUM_HOMEDIR} = @{HOME}/.config/chromium
@ -20,8 +20,8 @@
@{exec_path} = @{CHROMIUM_INSTALLDIR}/chrome-sandbox
profile chromium-chrome-sandbox @{exec_path} {
#include <abstractions/base>
#include <abstractions/deny-root-dir-access>
include <abstractions/base>
include <abstractions/deny-root-dir-access>
# For kernel unprivileged user namespaces
capability sys_admin,
@ -38,5 +38,5 @@ profile chromium-chrome-sandbox @{exec_path} {
@{PROC}/@{pids}/ r,
deny owner @{PROC}/@{pid}/oom_{,score_}adj rw,
#include if exists <local/chromium-chrome-sandbox>
include if exists <local/chromium-chrome-sandbox>
}