felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): torbrowser: do not give access to user dirs by default.

Browse source 
- Remove read-only access to most user dirs.
- Remove read-write access to download directories.

fix #490
This commit is contained in:
Alexandre Pujol 2024-09-16 13:36:29 +01:00
parent 2805ed9dd9
commit 7858cae330
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
5 changed files with 9 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/browsers/firefox
View file

@ -16,6 +16,8 @@ include <tunables/global>
profile firefox @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/app/firefox>
include <abstractions/user-download-strict>
include <abstractions/user-read-strict>
signal (send) set=(term, kill) peer=keepassxc-proxy,