felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): restric abstraction by using new @{int} and @{rand} variables.

Browse source
This commit is contained in:
Alexandre Pujol 2023-08-17 21:24:02 +01:00
parent 557d905543
commit b2d093e125
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 135 additions and 131 deletions
Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/abstractions/chromium
View file

@ -137,7 +137,7 @@
/var/tmp/ r,
owner /tmp/.@{chromium_domain}.* rw,
owner /tmp/.@{chromium_domain}*/{,**} rw,
owner /tmp/@{chromium_name}-crashlog-[0-9]*-[0-9]*.txt rw,
owner /tmp/@{chromium_name}-crashlog-@{int}-@{int}.txt rw,
owner /tmp/scoped_dir*/{,**} rw,
owner /tmp/tmp.* rw,
owner /tmp/tmp.*/ rw,
@ -190,12 +190,12 @@
@{sys}/devices/virtual/tty/tty[0-9]/active r,
/dev/ r,
/dev/hidraw[0-9]* rw,
/dev/hidraw@{int} rw,
/dev/tty rw,
/dev/video[0-9]* rw,
/dev/video@{int} rw,
# File Inherit
owner /dev/tty[0-9]* rw,
owner /dev/tty@{int} rw,
# Silencer
deny @{chromium_lib_dirs}/** w,