restrict tmp writes

This commit is contained in:
valoq 2025-09-10 14:47:49 +02:00
parent f07609bb37
commit b816d33b93
No known key found for this signature in database
GPG key ID: 19F09A0FB865CBD8

View file

@ -17,7 +17,11 @@ profile pdftoppm @{exec_path} {
/usr/share/poppler/{,**} r,
owner /tmp/{,**} rw,
owner /tmp/{,**}.ppm w,
owner /tmp/{,**}.png w,
owner /tmp/{,**}.jpg w,
owner /tmp/{,**}.jpeg w,
owner /tmp/{,**}.tiff w,
include if exists <local/pdftoppm>
}