felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-01 13:22:45 +00:00
parent 952ef478c0
commit 7f38dd255e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
17 changed files with 93 additions and 186 deletions
Download patch file Download diff file Expand all files Collapse all files

16
apparmor.d/profiles-a-f/font-manager
View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2021 Mikhail Morfikov
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -50,17 +51,14 @@ profile font-manager @{exec_path} {
@{sys}/firmware/acpi/pm_profile r,
@{sys}/fs/cgroup/{,**} r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/statm r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/smaps r,
@{PROC}/zoneinfo r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/smaps r,
owner @{PROC}/@{pid}/statm r,
# Silencer
owner /var/cache/fontconfig/ w,
deny /var/cache/fontconfig/ w,
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
deny @{user_share_dirs}/gvfs-metadata/{,*} r,
include if exists <local/font-manager>
}