felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): update steam profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2025-04-26 17:23:30 +02:00
parent 3295a1334a
commit b3da8d4be7
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 49 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/steam/steam-fossilize
View file

@ -6,7 +6,7 @@ abi <abi/4.0>,
include <tunables/global>
@{runtime} = SteamLinuxRuntime_sniper
@{runtime} = SteamLinuxRuntime_{sniper,soldier}
@{share_dirs} = @{user_share_dirs}/Steam @{HOME}/.steam/debian-installation
@{lib_dirs} = @{share_dirs}/ubuntu@{int2}_{32,64} @{share_dirs}/linux{32,64}
@{runtime_dirs} = @{lib_dirs}/steam-runtime{,-sniper}
@ -39,11 +39,13 @@ profile steam-fossilize @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/system/node/node@{int}/cpumap r,
@{PROC}/@{pids}/statm r,
@{PROC}/@{pid}/statm r,
@{PROC}/pressure/io r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
deny network inet stream,
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
include if exists <local/steam-fossilize>