felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): ensure xdg portal can start any sandboxing tool.

Browse source
This commit is contained in:
Alexandre Pujol 2025-07-06 21:56:24 +02:00
parent 3b040aa5ca
commit f56163afb1
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/freedesktop/xdg-document-portal
View file

@ -39,8 +39,9 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{bin}/flatpak rPUx,
@{bin}/flatpak rPx,
@{bin}/fusermount{,3} rCx -> fusermount,
@{bin}/snap rPx,
/ r,
owner @{att}/ r,
@ -64,6 +65,7 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
profile fusermount flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/app/fusermount>
capability dac_read_search,