felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update apparmor profiles

Browse source
This commit is contained in:
Mikhail Morfikov 2021-03-21 17:04:10 +01:00
parent f7ddca7289
commit c5ca6e1d90
No known key found for this signature in database
GPG key ID: 32D9CB634796CCA1
78 changed files with 1285 additions and 131 deletions
Download patch file Download diff file Expand all files Collapse all files

41
apparmor.d/gvfsd
View file

@ -23,8 +23,8 @@ profile gvfsd @{exec_path} {
/{usr/,}bin/{,ba,da}sh rix,
# Don't strip env here.
/{usr/,}lib/gvfs/gvfsd-* rcx -> backends,
/usr/libexec/gvfsd-* rcx -> backends,
/{usr/,}lib/gvfs/gvfsd-* rPx,
/usr/libexec/gvfsd-* rPx,
/usr/share/gvfs/{,**} r,
@ -32,42 +32,5 @@ profile gvfsd @{exec_path} {
owner @{PROC}/@{pid}/fd/ r,
profile backends {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice>
include <abstractions/freedesktop.org>
include <abstractions/trash>
include <abstractions/disks-read>
include <abstractions/devices-usb>
include <abstractions/user-download-strict>
mount fstype={fuse,fuse.*} -> @{run}/user/[0-9]*/gvfs/,
/{usr/,}lib/gvfs/gvfsd-* mr,
/usr/libexec/gvfsd-* mr,
/{usr/,}bin/ssh rPx,
/usr/bin/fusermount{,3} rPx,
/dev/ptmx rw,
/dev/fuse rw,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
owner @{run}/samba/ rw,
@{run}/mount/utab r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,
owner @{run}/user/[0-9]*/dconf/user rw,
}
include if exists <local/gvfsd>
}