felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fixes

Browse source
This commit is contained in:
nobody43 2023-01-13 01:01:08 +03:00 • committed by Alex
parent 4f3864a9b6
commit 8bb5b064d1
3 changed files with 26 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/profiles-m-r/murmurd
View file

@ -22,15 +22,17 @@ profile murmurd @{exec_path} {
network inet dgram,
network inet6 dgram,
@{exec_path} mr,
/{,usr/}bin/lsb_release Px -> lsb_release,
unix (send, receive) type=stream addr=none peer=(label=lsb_release),
dbus send bus=system path=/
interface=org.freedesktop.DBus.Peer
member=Ping
peer=(name=org.freedesktop.Avahi, label=avahi-daemon),
@{exec_path} mr,
/{,usr/}bin/lsb_release Px -> lsb_release,
/etc/mumble-server.ini r,
owner /var/lib/mumble-server/{,**} rw,
@ -42,12 +44,6 @@ profile murmurd @{exec_path} {
# Silencer
deny / r,
deny /usr/{,local/}lib/ r,
deny /usr/lib32/ r,
deny /usr/lib64/ r,
# file_inherit
unix (send, receive) type=stream addr=none peer=(label=lsb_release),
include if exists <local/murmurd>
}

28
apparmor.d/profiles-m-r/rustdesk
View file

@ -24,15 +24,6 @@ profile rustdesk @{exec_path} {
network inet6 stream,
network netlink raw, # discovery
@{exec_path} mrix,
/{,usr/}bin/ps rPx,
/{,usr/}bin/whoami rPx,
/{,usr/}bin/loginctl rPx,
/{,usr/}bin/curl rix,
/{,usr/}bin/python3.[0-9]* rCx -> python,
dbus (send) bus=accessibility path=/org/a11y/atspi/accessible/root
interface=org.a11y.atspi.Socket
member=Embed
@ -53,13 +44,20 @@ profile rustdesk @{exec_path} {
member=Set
peer=(name=:*),
@{exec_path} mrix,
/{,usr/}bin/ps rPx,
/{,usr/}bin/whoami rPx,
/{,usr/}bin/loginctl rPx,
/{,usr/}bin/curl rix,
/{,usr/}bin/python3.[0-9]* rCx -> python,
owner /tmp/[rR]ust[dD]esk/{,**} rw,
owner @{user_share_dirs}/logs/[rR]ust[dD]esk/{,**} rw,
owner @{user_config_dirs}/[rR]ust[dD]esk/{,**} rw,
owner @{run}/user/@{uid}/at-spi/bus{,_[0-9]*} rw,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/scaling_{cur,min,max}_freq r,
@{PROC}/uptime r,
@ -113,7 +111,7 @@ profile rustdesk @{exec_path} {
owner @{PROC}/@{pid}/fd/ r,
/usr/share/rustdesk/files/{,**} r,
/usr/share/[rR]ust[dD]esk/files/{,**} r,
owner /tmp/[rR]ust[dD]esk/ w,
owner /tmp/[rR]ust[dD]esk/pynput_service rw,
@ -122,11 +120,9 @@ profile rustdesk @{exec_path} {
owner @{HOME}/.xsession-errors w,
owner @{HOME}/.Xauthority r,
# python.d?
/usr/share/dpkg/cputable r,
# Silencer
# Unknown yet
deny /etc/apt/{,**} r,
/usr/share/dpkg/cputable r,
include if exists <local/rustdesk_python>
}