felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add trash-strict.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-27 22:06:07 +00:00
parent 197c1bd78a
commit bdb2b396b3
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
7 changed files with 88 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/apps/calibre
View file

@ -35,7 +35,7 @@ profile calibre @{exec_path} {
include <abstractions/qt5-shader-cache>
include <abstractions/ssl_certs>
include <abstractions/thumbnails-cache-read>
include <abstractions/trash>
include <abstractions/trash-strict>
include <abstractions/user-download-strict>
capability sys_ptrace,

2
apparmor.d/groups/gnome/gio-launch-desktop
View file

@ -17,7 +17,7 @@ profile gio-launch-desktop @{exec_path} flags=(attach_disconnected) {
include <abstractions/deny-sensitive-home>
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
include <abstractions/trash>
include <abstractions/trash-strict>
@{exec_path} mr,

2
apparmor.d/groups/gnome/nautilus
View file

@ -24,7 +24,7 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
include <abstractions/gnome-strict>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/trash>
include <abstractions/trash-strict>
# mqueue r type=posix /,

2
apparmor.d/groups/gvfs/gvfsd-trash
View file

@ -13,7 +13,7 @@ profile gvfsd-trash @{exec_path} {
include <abstractions/bus-session>
include <abstractions/freedesktop.org>
include <abstractions/nameservice-strict>
include <abstractions/trash>
include <abstractions/trash-strict>
# When mounting a SMB share
network inet stream,

2
apparmor.d/groups/kde/kioworker
View file

@ -16,7 +16,7 @@ profile kioworker @{exec_path} {
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
include <abstractions/thumbnails-cache-write>
include <abstractions/trash>
include <abstractions/trash-strict>
network inet dgram,
network inet6 dgram,