feat(profile): newer gnome want to read /.
This commit is contained in:
parent
549c6ba2f5
commit
c6c4920598
2 changed files with 6 additions and 0 deletions
|
|
@ -38,6 +38,8 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
|
||||||
/usr/share/gnome-system-monitor/{,**} r,
|
/usr/share/gnome-system-monitor/{,**} r,
|
||||||
/usr/share/firefox-esr/browser/chrome/icons/default/*.png r,
|
/usr/share/firefox-esr/browser/chrome/icons/default/*.png r,
|
||||||
|
|
||||||
|
/ r,
|
||||||
|
|
||||||
owner @{tmp}/gdkpixbuf-xpm-tmp.@{rand6} rw,
|
owner @{tmp}/gdkpixbuf-xpm-tmp.@{rand6} rw,
|
||||||
|
|
||||||
owner @{run}/user/@{uid}/doc/ rw,
|
owner @{run}/user/@{uid}/doc/ rw,
|
||||||
|
|
@ -76,6 +78,8 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
|
||||||
@{PROC}/diskstats r,
|
@{PROC}/diskstats r,
|
||||||
@{PROC}/vmstat r,
|
@{PROC}/vmstat r,
|
||||||
|
|
||||||
|
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
|
||||||
|
|
||||||
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
||||||
|
|
||||||
/dev/tty rw,
|
/dev/tty rw,
|
||||||
|
|
|
||||||
|
|
@ -25,6 +25,8 @@ profile fractal @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
/usr/share/xml/iso-codes/{,**} r,
|
/usr/share/xml/iso-codes/{,**} r,
|
||||||
|
|
||||||
|
/ r,
|
||||||
|
|
||||||
owner @{tmp}/.@{rand6} rw,
|
owner @{tmp}/.@{rand6} rw,
|
||||||
owner @{tmp}/.goutputstream-@{rand6} rw,
|
owner @{tmp}/.goutputstream-@{rand6} rw,
|
||||||
owner @{tmp}/@{rand6} rw,
|
owner @{tmp}/@{rand6} rw,
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue