diff --git a/apparmor.d/abstractions/app-launcher-user b/apparmor.d/abstractions/app-launcher-user index 22d0c786..a68f02ea 100644 --- a/apparmor.d/abstractions/app-launcher-user +++ b/apparmor.d/abstractions/app-launcher-user @@ -18,20 +18,21 @@ /opt/*/[a-zA-Z0-9]* rPUx, # Firefox - /{usr/,}lib/ r, - /{usr/,}lib/firefox/ r, - /{usr/,}lib/firefox/firefox* rPx, - - # Google Chrome - /opt/ r, - /opt/google/ r, - /opt/google/chrome{,-beta,-unstable}/ r, - /opt/google/chrome{,-beta,-unstable}/google-chrome{,-beta,-unstable} rPx, + /{usr/,}bin/firefox{,-esr,-bin} rPx, + /{usr/,}lib{,32,64}/firefox{,-esr,-bin}/firefox{,-esr,-bin} rPx, + /opt/firefox{,-esr,-bin}/firefox{,-esr,-bin} rPx, # Brave - /opt/brave.com/ r, - /opt/brave.com/brave{,-beta,-dev}/ r, - /opt/brave.com/brave{,-beta,-dev}/brave-browser{,-beta,-dev} rPx, + /opt/brave{-bin,.com}/brave{,-beta,-dev,-bin}/brave{,-beta,-dev,-bin} rPx, + + # Chromium + /{usr/,}lib/chromium/chromium rPx, + + # Chrome + /opt/google/chrome{,-beta,-stable,-unstable}/chrome{,-beta,-stable,-unstable} rPx, + + # Opera + /{usr/,}lib/@{multiarch}/opera{,-beta,-developer}/opera{,-beta,-developer} rPx, # Discord /usr/share/ r, diff --git a/apparmor.d/groups/children/child-open b/apparmor.d/groups/children/child-open index f40bd360..2a9416b9 100644 --- a/apparmor.d/groups/children/child-open +++ b/apparmor.d/groups/children/child-open @@ -40,15 +40,18 @@ profile child-open { # Files explorer /{usr/,}bin/nautilus rPx, - # Browsers - /{usr/,}bin/chromium rPx, - /{usr/,}bin/firefox{,-esr} rPx, - /{usr/,}lib{,32,64}/firefox{,-esr}/firefox{,-esr} rPx, - /{usr/,}lib/@{multiarch}/opera{,-beta,-developer}/opera{,-beta,-developer} rPx, - /{usr/,}lib/chromium/chromium rPx, - /opt/brave.com/brave{,-beta,-dev}/brave{,-beta,-dev} rPx, - /opt/firefox{,-esr}/firefox{,-esr} rPx, - /opt/google/chrome{,-beta,-unstable}/chrome{,-beta,-unstable} rPx, + # Firefox + /{usr/,}bin/firefox{,-esr,-bin} rPx, + /{usr/,}lib{,32,64}/firefox{,-esr,-bin}/firefox{,-esr,-bin} rPx, + /opt/firefox{,-esr,-bin}/firefox{,-esr,-bin} rPx, + # Brave + /opt/brave{-bin,.com}/brave{,-beta,-dev,-bin}/brave{,-beta,-dev,-bin} rPx, + # Chromium + /{usr/,}lib/chromium/chromium rPx, + # Chrome + /opt/google/chrome{,-beta,-stable,-unstable}/chrome{,-beta,-stable,-unstable} rPx, + # Opera + /{usr/,}lib/@{multiarch}/opera{,-beta,-developer}/opera{,-beta,-developer} rPx, # Text editors /{usr/,}bin/code rPx,