mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore: cleanup abstraction' headers.

Browse source
This commit is contained in:
Alexandre Pujol 2023-11-11 20:25:55 +00:00
parent 3b42cc0ca7
commit 02115a194b
Failed to generate hash of commit
4 changed files with 10 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/abstractions/chromium-common
View file

@ -3,6 +3,9 @@
# Copyright (C) 2022-2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# This abstraction is for chromium based application. Chromium based browsers
# need to use abstractions/chromium instead.
abi <abi/3.0>,
# The following rules are needed only when the kernel.unprivileged_userns_clone option is set

2
apparmor.d/abstractions/flatpak-snap
View file

@ -1,6 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2018 Nibaldo Gonzalez <nibgonz@gmail.com>
# 2019-2021 Mikhail Morfikov
# Copyright (C) 2019-2021 Mikhail Morfikov
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,

7
apparmor.d/abstractions/totem
View file

@ -1,7 +1,8 @@
# vim:syntax=apparmor
# Author: Jamie Strandboge <jamie@canonical.com>
# apparmor.d - Full set of apparmor profiles
# Copyright (C) Jamie Strandboge <jamie@canonical.com>
# SPDX-License-Identifier: GPL-2.0-only
# Description: Limit executable access and reasonable read access. A look at
# Limit executable access and reasonable read access. A look at
# the gconf schema files for totem-video-thumbnailer reveals at least the
# following files:
# 3gpp, ac3, acm, aiff, amr-wb, ape, asf, asx, au, avi, basic, divx, dv, flac,

4
apparmor.d/abstractions/user-read
View file

@ -2,8 +2,8 @@
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# Give read access on all defined user directories. It should only be used if
# access to ALL folders is required.
# This abstraction gives read access on all defined user directories. It should
# only be used if access to **ALL** folders is required.
owner @{HOME}/@{XDG_WALLPAPERS_DIR}/{,**} r,
owner @{HOME}/@{XDG_SCREENSHOTS_DIR}/{,**} r,