felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

build(debian): use hide instead of displace to overwrite upstream profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-10 14:43:43 +00:00
parent b342df689a
commit f5aacbd029
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
6 changed files with 30 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

21
dists/overwrite Normal file
View file

@ -0,0 +1,21 @@
# Apparmor ships some unconfined profiles that allow everything and set the
# userns rules. This file keeps track of them and allow apparmor.d to replace
# them by our own.
# File format: one profile name by line.
# This is managed globally in this file and not in debian/apparmor.d.hide as
# it applies to all distributions using apparmor 4.0+
brave
chrome
element-desktop
epiphany
firefox
flatpak
nautilus
opera
plasmashell
slirp4netns
systemd-coredump
thunderbird
virtiofsd