restrict tmp writes
This commit is contained in:
parent
f07609bb37
commit
b816d33b93
1 changed files with 5 additions and 1 deletions
|
|
@ -17,7 +17,11 @@ profile pdftoppm @{exec_path} {
|
||||||
|
|
||||||
/usr/share/poppler/{,**} r,
|
/usr/share/poppler/{,**} r,
|
||||||
|
|
||||||
owner /tmp/{,**} rw,
|
owner /tmp/{,**}.ppm w,
|
||||||
|
owner /tmp/{,**}.png w,
|
||||||
|
owner /tmp/{,**}.jpg w,
|
||||||
|
owner /tmp/{,**}.jpeg w,
|
||||||
|
owner /tmp/{,**}.tiff w,
|
||||||
|
|
||||||
include if exists <local/pdftoppm>
|
include if exists <local/pdftoppm>
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue