apparmor.d/apparmor.d/groups/gvfs/gvfsd-http
2023-03-02 17:50:45 +00:00

31 lines
750 B
Text

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2021 Mikhail Morfikov
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/{,gvfs/}gvfsd-http
profile gvfsd-http @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
include <abstractions/freedesktop.org>
include <abstractions/nameservice-strict>
include <abstractions/p11-kit>
include <abstractions/ssl_certs>
network inet stream,
network inet6 stream,
network inet dgram,
network inet6 dgram,
network netlink raw,
@{exec_path} mr,
owner @{run}/user/@{uid}/gvfsd/socket-* rw,
include if exists <local/gvfsd-http>
}