felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): enable abi 4 rules by default.

Browse source
This commit is contained in:
Alexandre Pujol 2024-10-02 14:19:26 +01:00
parent 5ed4df6916
commit d6b7bef89e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
13 changed files with 13 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/abstractions/common/bwrap
View file

@ -7,7 +7,7 @@
# - the flag: attach_disconnected
# - bwrap execution: '@{bin}/bwrap rix,'
# userns,
userns,
capability net_admin,
capability setpcap,

2
apparmor.d/abstractions/common/chromium
View file

@ -6,7 +6,7 @@
# This abstraction is for chromium based application. Chromium based browsers
# need to use abstractions/chromium instead.
# userns,
userns,
capability setgid, # If kernel.unprivileged_userns_clone = 1
capability setuid, # If kernel.unprivileged_userns_clone = 1

2
apparmor.d/abstractions/common/electron
View file

@ -18,7 +18,7 @@
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
# userns,
userns,
capability setgid, # If kernel.unprivileged_userns_clone = 1
capability setuid, # If kernel.unprivileged_userns_clone = 1