felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): ensure flatpak can handle chromium based software.

Browse source 
fix  #715
This commit is contained in:
Alexandre Pujol 2025-04-13 19:04:44 +02:00 • committed by Alex
parent c008cbda67
commit 80f5c50f13
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/groups/flatpak/flatpak-app
View file

@ -41,12 +41,12 @@ profile flatpak-app flags=(attach_disconnected,mediate_deleted) {
network netlink raw, network netlink raw,
network unix stream, network unix stream,
ptrace (read), ptrace read,
ptrace trace peer=flatpak-app, ptrace trace peer=flatpak-app,
signal receive peer=flatpak, signal receive peer=flatpak,
signal receive set=(int term) peer=flatpak-portal, signal receive set=(int term) peer=flatpak-portal,
signal receive set=(int) peer=flatpak-session-helper, signal receive set=(int term) peer=flatpak-session-helper,
@{bin}/** rmix, @{bin}/** rmix,
@{lib}/** rmix, @{lib}/** rmix,
@ -57,6 +57,7 @@ profile flatpak-app flags=(attach_disconnected,mediate_deleted) {
/var/lib/flatpak/app/*/**/@{bin}/** rmix, /var/lib/flatpak/app/*/**/@{bin}/** rmix,
/var/lib/flatpak/app/*/**/@{lib}/** rmix, /var/lib/flatpak/app/*/**/@{lib}/** rmix,
@{run}/flatpak/app/*/.org.chromium.Chromium.@{rand6} rm,
@{run}/flatpak/app/*/**so* rm, @{run}/flatpak/app/*/**so* rm,
@{run}/parent/@{bin}/** rmix, @{run}/parent/@{bin}/** rmix,
@{run}/parent/@{lib}/** rmix, @{run}/parent/@{lib}/** rmix,