felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source 
See #134
This commit is contained in:
Alexandre Pujol 2023-08-06 16:06:17 +02:00
parent 5938079dfd
commit cdc10fdb31
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
20 changed files with 64 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

10
apparmor.d/groups/browsers/firefox
View file

@ -130,6 +130,7 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
@{bin}/{,ba,da}sh rix,
@{bin}/basename rix,
@{bin}/expr rix,
@{firefox_lib_dirs}/{,**} r,
@{firefox_lib_dirs}/*.so mr,
@ -212,13 +213,16 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
/tmp/ r,
/var/tmp/ r,
owner /tmp/@{firefox_name}/ rw,
owner /tmp/@{firefox_name}/* rwk,
owner /tmp/* rw,
owner /tmp/firefox_*/ rw,
owner /tmp/firefox_*/* rwk,
owner /tmp/@{firefox_name}/ rw,
owner /tmp/@{firefox_name}/* rwk,
owner /tmp/mozilla_*/ rw,
owner /tmp/mozilla_*/* rw,
owner /tmp/MozillaBackgroundTask-*-removeDirectory/ rw,
owner /tmp/MozillaBackgroundTask-*-removeDirectory/** rwk,
owner /tmp/Mozillato-be-removed-cachePurge-* k,
owner /tmp/Temp-*/ rw,
@{run}/mount/utab r,
@ -240,6 +244,8 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
@{sys}/devices/system/cpu/present r,
@{sys}/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us r,
owner @{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/background.slice/*/cpu.max r,
@{PROC}/@{pid}/net/arp r,
@{PROC}/@{pid}/net/if_inet6 r,
@{PROC}/@{pid}/net/route r,