felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): deny apparmor/.null in the base abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-03 11:51:39 +00:00
parent ba6172bb8c
commit 7e8f854b16
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
23 changed files with 2 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/profiles-g-l/gio-querymodules
View file

@ -19,7 +19,6 @@ profile gio-querymodules @{exec_path} flags=(attach_disconnected) {
@{lib}/gtk-{3,4}.0/**/giomodule.cache{,.[0-9A-Z]*} w,
@{lib}/gio/modules/giomodule.cache{,.[0-9A-Z]*} w,
deny /apparmor/.null rw,
deny network inet stream,
deny network inet6 stream,

2
apparmor.d/profiles-g-l/gtk-update-icon-cache
View file

@ -26,7 +26,5 @@ profile gtk-update-icon-cache @{exec_path} flags=(attach_disconnected) {
owner @{user_share_dirs}/**/.icon-theme.cache rw,
owner @{user_share_dirs}/**/icon-theme.cache rw,
deny /apparmor/.null rw,
include if exists <local/gtk-update-icon-cache>
}

1
apparmor.d/profiles-g-l/kmod
View file

@ -71,7 +71,6 @@ profile kmod @{exec_path} flags=(attach_disconnected) {
/dev/tty@{int} rw,
deny @{user_share_dirs}/gvfs-metadata/* r,
deny /apparmor/.null rw,
deny unix (receive) type=stream,
include if exists <local/kmod>

2
apparmor.d/profiles-g-l/lvm
View file

@ -48,7 +48,5 @@ profile lvm @{exec_path} flags=(attach_disconnected) {
/dev/**/ r,
/dev/mapper/control rw,
deny /apparmor/.null rw,
include if exists <local/lvm>
}