felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-08-27 14:54:04 +01:00
parent 19331acaa9
commit 75ef5ef6ad
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
48 changed files with 205 additions and 141 deletions
Download patch file Download diff file Expand all files Collapse all files

27
apparmor.d/profiles-a-f/fusermount
View file

@ -15,18 +15,6 @@ profile fusermount @{exec_path} {
capability dac_read_search,
capability sys_admin,
@{exec_path} mr,
/etc/fuse.conf r,
/etc/machine-id r,
# Where to mount ISO files
owner @{HOME}/*/ rw,
owner @{HOME}/*/*/ rw,
owner @{user_cache_dirs}/**/ rw,
@{run}/user/@{uid}/doc/ r,
/var/tmp/flatpak-cache-*/*/ r,
# Be able to mount ISO images
mount fstype={fuse,fuse.*} -> @{HOME}/*/,
mount fstype={fuse,fuse.*} -> @{HOME}/*/*/,
@ -45,6 +33,21 @@ profile fusermount @{exec_path} {
umount @{run}/user/@{uid}/*/,
umount /var/tmp/flatpak-cache-*/*/,
@{exec_path} mr,
/etc/fuse.conf r,
/etc/machine-id r,
/var/tmp/flatpak-cache-*/*/ r,
# Where to mount ISO files
owner @{HOME}/*/ rw,
owner @{HOME}/*/*/ rw,
owner @{user_cache_dirs}/**/ rw,
@{run}/user/@{uid}/doc/ r,
@{PROC}/@{pid}/mounts r,
/dev/fuse rw,