felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-01-27 19:39:14 +00:00
parent 8dfd58a335
commit 78d5ce9ecc
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 43 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

26
apparmor.d/groups/browsers/firefox
View file

@ -166,31 +166,31 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
/tmp/ r,
/var/tmp/ r,
owner /tmp/user/@{uid}/ rw,
owner /tmp/user/@{uid}/* rwk,
owner /tmp/user/@{uid}/Temp-@{uuid}/ rw,
owner /tmp/user/@{uid}/Temp-@{uuid}/* rwk,
owner /tmp/user/@{uid}/@{name}/ rw,
owner /tmp/user/@{uid}/@{name}/* rwk,
owner /tmp/.xfsm-ICE-@{rand6} rw,
owner /tmp/@{name}/ rw,
owner /tmp/@{name}/* rwk,
owner /tmp/@{rand6}.tmp r,
owner /tmp/@{rand8}.txt w,
owner /tmp/* w, # file downloads (to anywhere)
owner /tmp/firefox_*/ rw,
owner /tmp/firefox_*/* rwk,
owner /tmp/mozilla_*/ rw,
owner /tmp/mozilla_*/* rw,
owner /tmp/MozillaBackgroundTask-???????????????-removeDirectory/{**,} rw,
owner /tmp/MozillaBackgroundTask-???????????????-removeDirectory/.parentlock k,
owner /tmp/Mozillato-be-removed-cachePurge-??????????????? rwk,
owner /tmp/mozilla-temp-@{int} rw,
owner /tmp/Mozilla@{uuid}-cachePurge-??????????????? rwk,
owner /tmp/Mozilla\{@{uuid}\}-cachePurge-??????????????? rwk,
owner /tmp/MozillaBackgroundTask-???????????????-removeDirectory/.parentlock k,
owner /tmp/MozillaBackgroundTask-???????????????-removeDirectory/{**,} rw,
owner /tmp/Mozillato-be-removed-cachePurge-??????????????? rwk,
owner /tmp/Temp-@{uuid}/{**,} rw,
owner /tmp/mozilla-temp-@{int} rw,
owner /tmp/@{rand8}.txt w,
owner /tmp/tmp-???.xpi rw,
owner /tmp/.xfsm-ICE-@{rand6} rw,
owner /tmp/tmpaddon r,
owner /tmp/* w, # file downloads (to anywhere)
owner /tmp/user/@{uid}/ rw,
owner /tmp/user/@{uid}/@{name}/ rw,
owner /tmp/user/@{uid}/@{name}/* rwk,
owner /tmp/user/@{uid}/* rwk,
owner /tmp/user/@{uid}/Temp-@{uuid}/ rw,
owner /tmp/user/@{uid}/Temp-@{uuid}/* rwk,
@{run}/mount/utab r,