felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): ensure nautilus can access root files.

Browse source
This commit is contained in:
Alexandre Pujol 2025-08-19 22:58:46 +02:00
parent c806ec44eb
commit f3d209e42a
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 9 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/groups/gvfs/gvfsd-admin
View file

@ -22,14 +22,15 @@ profile gvfsd-admin @{exec_path} {
/usr/share/mime/mime.cache r, /usr/share/mime/mime.cache r,
@{MOUNTS}/{,**} rw, #aa:lint ignore=too-wide
# Full access to system's data, but no write access to sensitive system directories
@{run}/mount/utab r, / r,
@{run}/user/@{uid}/gvfsd/socket-@{rand8} rw, /*/ r,
/*/** rw,
@{PROC}/@{pid}/fdinfo/@{int} r, deny @{sys}/** w,
@{PROC}/@{pid}/mountinfo r, deny @{PROC}/** w,
@{PROC}/@{pid}/stat r, deny @{efi}/** w,
deny /dev/** w,
include if exists <local/gvfsd-admin> include if exists <local/gvfsd-admin>
} }