diff --git a/apparmor.d/groups/gpg/gpgconf b/apparmor.d/groups/gpg/gpgconf index 539f1b85..80c1a741 100644 --- a/apparmor.d/groups/gpg/gpgconf +++ b/apparmor.d/groups/gpg/gpgconf @@ -31,7 +31,6 @@ profile gpgconf @{exec_path} { owner @{HOME}/@{XDG_GPG_DIR}/** rwkl -> @{HOME}/@{XDG_GPG_DIR}/**, owner @{run}/user/@{uid}/gnupg/ w, owner @{run}/user/@{uid}/gnupg/** rwkl -> @{run}/user/@{uid}/gnupg/**, - owner @{user_projects_dirs}/**/gnupg/** rwkl -> @{user_projects_dirs}/**/gnupg/**, owner @{PROC}/@{pid}/task/@{tid}/stat rw, owner @{PROC}/@{pid}/task/@{tid}/comm rw, diff --git a/apparmor.d/groups/gpg/gpgsm b/apparmor.d/groups/gpg/gpgsm index fb9e5073..c545c81f 100644 --- a/apparmor.d/groups/gpg/gpgsm +++ b/apparmor.d/groups/gpg/gpgsm @@ -23,7 +23,6 @@ profile gpgsm @{exec_path} { deny /usr/bin/.gnupg/ w, owner @{HOME}/@{XDG_GPG_DIR}/** rwkl -> @{HOME}/@{XDG_GPG_DIR}/**, - owner @{user_projects_dirs}/**/gnupg/** rwkl -> @{user_projects_dirs}/**, owner /var/lib/*/.gnupg/** rwkl -> /var/lib/*/.gnupg/**, diff --git a/apparmor.d/profiles-m-r/pass b/apparmor.d/profiles-m-r/pass index c3baca5a..73619e9c 100644 --- a/apparmor.d/profiles-m-r/pass +++ b/apparmor.d/profiles-m-r/pass @@ -57,8 +57,6 @@ profile pass @{exec_path} { /usr/share/terminfo/x/xterm-256color r, owner @{user_password_store_dirs}/{,**} rw, - owner @{user_projects_dirs}/**/*-store/{,**} rw, - owner @{user_config_dirs}/*-store/{,**} rw, owner /dev/shm/pass.*/{,*} rw, @{PROC}/@{pids}/cmdline r, @@ -85,8 +83,6 @@ profile pass @{exec_path} { owner @{HOME}/.viminf{o,z}{,.tmp} rw, owner @{user_password_store_dirs}/{,**/} r, - owner @{user_projects_dirs}/**/*-store/{,**/} r, - owner @{user_config_dirs}/*-store/{,**/} r, owner @{user_cache_dirs}/vim/{,**} rw, owner @{user_config_dirs}/vim/{,**} rw, @@ -125,17 +121,13 @@ profile pass @{exec_path} { owner @{user_password_store_dirs}/ rw, owner @{user_password_store_dirs}/** rwkl -> @{HOME}/.password-store/**, - owner @{user_projects_dirs}/**/*-store/ rw, - owner @{user_projects_dirs}/**/*-store/** rwkl -> @{user_projects_dirs}/**/*-store/**, - owner @{user_config_dirs}/*-store/ rw, - owner @{user_config_dirs}/*-store/** rwkl -> @{user_config_dirs}/*-store/**, owner /tmp/.git_vtag_tmp* rw, # For git log --show-signature include if exists } - profile gpg flags=(complain) { + profile gpg { include include @@ -148,10 +140,6 @@ profile pass @{exec_path} { owner @{user_password_store_dirs}/ rw, owner @{user_password_store_dirs}/** rwkl -> @{HOME}/.password-store/**, - owner @{user_projects_dirs}/**/*-store/ rw, - owner @{user_projects_dirs}/**/*-store/** rwkl -> @{user_projects_dirs}/**/*-store/**, - owner @{user_config_dirs}/*-store/ rw, - owner @{user_config_dirs}/*-store/** rwkl -> @{user_config_dirs}/*-store/**, include if exists } diff --git a/apparmor.d/profiles-m-r/pass-import b/apparmor.d/profiles-m-r/pass-import index 6ed9aea1..b7cd5722 100644 --- a/apparmor.d/profiles-m-r/pass-import +++ b/apparmor.d/profiles-m-r/pass-import @@ -33,8 +33,6 @@ profile pass-import @{exec_path} { /usr/share/file/misc/magic.mgc r, owner @{user_password_store_dirs}/{,**} rw, - owner @{user_projects_dirs}/**/*-store/{,**} rw, - owner @{user_config_dirs}/*-store/{,**} rw, owner /tmp/[a-zA-Z0-9]* rw,