felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): improve protonmail-bridge-core.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-17 14:20:08 +02:00
parent 04dc921eb1
commit daa6a1239b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/profiles-m-r/protonmail-bridge-core
View file

@ -12,8 +12,9 @@ abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{lib}/protonmail/bridge/bridge
profile protonmail-bridge-core @{exec_path} {
profile protonmail-bridge-core @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
@ -25,7 +26,7 @@ profile protonmail-bridge-core @{exec_path} {
@{exec_path} mr,
@{bin}/pass rCx -> pass,
@{bin}/pass Cx -> pass,
@{lib}/protonmail/bridge/bridge-gui ix,
@ -49,7 +50,6 @@ profile protonmail-bridge-core @{exec_path} {
@{PROC}/1/cgroup r,
@{PROC}/sys/net/core/somaxconn r,
deny @{bin}/pass x,
deny owner @{user_passwordstore_dirs}/** r,
profile pass {
@ -76,6 +76,7 @@ profile protonmail-bridge-core @{exec_path} {
owner @{user_passwordstore_dirs}/ r,
owner @{user_passwordstore_dirs}/.gpg-id r,
owner @{user_passwordstore_dirs}/docker-credential-helpers/{,**} rw,
owner @{user_passwordstore_dirs}/protonmail-credentials/{,**} rw,
deny owner @{user_passwordstore_dirs}/**/ r,