mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(abs): improve browser entry point handling.

Browse source
This commit is contained in:
Alexandre Pujol 2023-04-25 23:19:48 +01:00
parent e569f907e2
commit 11506d5416
Failed to generate hash of commit
2 changed files with 25 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
apparmor.d/abstractions/app-launcher-user
View file

@ -18,20 +18,21 @@
/opt/*/[a-zA-Z0-9]* rPUx, /opt/*/[a-zA-Z0-9]* rPUx,
# Firefox # Firefox
/{usr/,}lib/ r, /{usr/,}bin/firefox{,-esr,-bin} rPx,
/{usr/,}lib/firefox/ r, /{usr/,}lib{,32,64}/firefox{,-esr,-bin}/firefox{,-esr,-bin} rPx,
/{usr/,}lib/firefox/firefox* rPx, /opt/firefox{,-esr,-bin}/firefox{,-esr,-bin} rPx,
# Google Chrome
/opt/ r,
/opt/google/ r,
/opt/google/chrome{,-beta,-unstable}/ r,
/opt/google/chrome{,-beta,-unstable}/google-chrome{,-beta,-unstable} rPx,
# Brave # Brave
/opt/brave.com/ r, /opt/brave{-bin,.com}/brave{,-beta,-dev,-bin}/brave{,-beta,-dev,-bin} rPx,
/opt/brave.com/brave{,-beta,-dev}/ r,
/opt/brave.com/brave{,-beta,-dev}/brave-browser{,-beta,-dev} rPx, # Chromium
/{usr/,}lib/chromium/chromium rPx,
# Chrome
/opt/google/chrome{,-beta,-stable,-unstable}/chrome{,-beta,-stable,-unstable} rPx,
# Opera
/{usr/,}lib/@{multiarch}/opera{,-beta,-developer}/opera{,-beta,-developer} rPx,
# Discord # Discord
/usr/share/ r, /usr/share/ r,

21
apparmor.d/groups/children/child-open
View file

@ -40,15 +40,18 @@ profile child-open {
# Files explorer # Files explorer
/{usr/,}bin/nautilus rPx, /{usr/,}bin/nautilus rPx,
# Browsers # Firefox
/{usr/,}bin/chromium rPx, /{usr/,}bin/firefox{,-esr,-bin} rPx,
/{usr/,}bin/firefox{,-esr} rPx, /{usr/,}lib{,32,64}/firefox{,-esr,-bin}/firefox{,-esr,-bin} rPx,
/{usr/,}lib{,32,64}/firefox{,-esr}/firefox{,-esr} rPx, /opt/firefox{,-esr,-bin}/firefox{,-esr,-bin} rPx,
/{usr/,}lib/@{multiarch}/opera{,-beta,-developer}/opera{,-beta,-developer} rPx, # Brave
/{usr/,}lib/chromium/chromium rPx, /opt/brave{-bin,.com}/brave{,-beta,-dev,-bin}/brave{,-beta,-dev,-bin} rPx,
/opt/brave.com/brave{,-beta,-dev}/brave{,-beta,-dev} rPx, # Chromium
/opt/firefox{,-esr}/firefox{,-esr} rPx, /{usr/,}lib/chromium/chromium rPx,
/opt/google/chrome{,-beta,-unstable}/chrome{,-beta,-unstable} rPx, # Chrome
/opt/google/chrome{,-beta,-stable,-unstable}/chrome{,-beta,-stable,-unstable} rPx,
# Opera
/{usr/,}lib/@{multiarch}/opera{,-beta,-developer}/opera{,-beta,-developer} rPx,
# Text editors # Text editors
/{usr/,}bin/code rPx, /{usr/,}bin/code rPx,