felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): cleanup mount dir access.

Browse source 
see #412
This commit is contained in:
Alexandre Pujol 2024-07-14 18:08:45 +01:00
parent 68da315ac2
commit 85ccc46e44
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 14 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-s-z/totem
View file

@ -35,6 +35,9 @@ profile totem @{exec_path} flags=(attach_disconnected) {
/usr/share/grilo-plugins/{,**} r,
/usr/share/thumbnailers/{,**} r,
owner @{HOME}/ r,
owner @{MOUNTS}/ r,
owner @{user_music_dirs}/{,**} rw,
owner @{user_pictures_dirs}/{,**} rw,
owner @{user_torrents_dirs}/{,**} rw,
@ -50,6 +53,8 @@ profile totem @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/gvfs/smb-share:server=*,share=**/ r,
owner @{run}/user/@{uid}/gvfs/smb-share:server=*,share=** r,
@{run}/mount/utab r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/task/@{tid}/comm w,