feat(profiles): general update.
This commit is contained in:
parent
d629ac5788
commit
eddf6bfc4f
13 changed files with 30 additions and 18 deletions
|
|
@ -21,8 +21,8 @@ profile sbctl @{exec_path} {
|
|||
|
||||
/{boot,efi}/{,**} r,
|
||||
/{boot,efi}/EFI/{,**} rw,
|
||||
/{boot,efi}/vmlinuz-linux* rw,
|
||||
/{usr/,}lib/fwupd/efi/{,**} rw,
|
||||
/boot/vmlinuz-linux* rw,
|
||||
|
||||
@{sys}/firmware/efi/efivars/db-@{uuid} rw,
|
||||
@{sys}/firmware/efi/efivars/KEK-@{uuid} rw,
|
||||
|
|
|
|||
|
|
@ -15,6 +15,8 @@ profile vlc-cache-gen @{exec_path} {
|
|||
|
||||
/{usr/,}lib/vlc/plugins/{,*} rw,
|
||||
|
||||
@{sys}/devices/system/cpu/possible r,
|
||||
|
||||
# Inherit silencer
|
||||
deny network inet6 stream,
|
||||
deny network inet stream,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue