felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2021-12-08 17:38:43 +00:00
parent 4522ca91db
commit dc0347388b
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 41 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/profiles-a-f/browserpass
View file

@ -37,6 +37,7 @@ profile browserpass @{exec_path} flags=(attach_disconnected) {
deny owner @{user_share_dirs}/gvfs-metadata/{,**} r,
deny owner @{HOME}/@{XDG_DOWNLOAD_DIR}/{,**} rw,
deny /dev/dri/card[0-9]* rw,
deny /dev/dri/renderD128 rw,
include if exists <local/browserpass>
}

6
apparmor.d/profiles-a-f/dkms
View file

@ -1,6 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2019-2021 Mikhail Morfikov
# 2021 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -11,6 +11,7 @@ include <tunables/global>
profile dkms @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/openssl>
capability dac_read_search,
capability mknod,
@ -63,8 +64,7 @@ profile dkms @{exec_path} flags=(attach_disconnected) {
/ r,
/{usr/,}lib/modules/*/updates/ rw,
/{usr/,}lib/modules/*/updates/dkms/ rw,
/{usr/,}lib/modules/*/updates/dkms/*.ko rw,
/{usr/,}lib/modules/*/updates/dkms/{,*,*/,**.ko.xz,**.ko.zst} rw,
/{usr/,}lib/modules/*/kernel/drivers/{,*,*/,**.ko.xz,**.ko.zst} rw,
/var/lib/dkms/ r,