felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): remove rules promoted into the base abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2022-11-28 18:05:29 +00:00
parent 116cb3059f
commit 9a46df81b9
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
28 changed files with 0 additions and 36 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/browsers/brave
View file

@ -134,7 +134,6 @@ profile brave @{exec_path} {
@{sys}/devices/pci[0-9]*/**/usb[0-9]/{,**/}{busnum,devnum} r,
@{sys}/devices/pci[0-9]*/**/usb[0-9]/{,**/}{descriptors,manufacturer,product,serial,bConfigurationValue} r,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]/cpuinfo_max_freq r,
@{sys}/devices/system/cpu/online r,
@{sys}/devices/virtual/tty/tty[0-9]/active r,
/dev/bus/usb/[0-9]*/[0-9]* rw,

1
apparmor.d/groups/browsers/firefox
View file

@ -225,7 +225,6 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/pci[0-9]*/**/drm/renderD[0-9]*/ r,
@{sys}/devices/pci[0-9]*/**/irq r,
@{sys}/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us r,
@{sys}/devices/system/cpu/possible r,
deny @{sys}/devices/system/cpu/cpu[0-9]/cache/index[0-9]/size r,
deny @{sys}/devices/system/cpu/cpufreq/policy[0-9]/cpuinfo_max_freq r,
deny @{sys}/devices/system/cpu/present r,