mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-29 22:35:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

feat(profiles): ensure gpg stays confined.

Browse source
This commit is contained in:
Alexandre Pujol 2023-03-12 15:33:21 +00:00
parent 3349dbda7f
commit 25e2d9d1f4
Failed to generate hash of commit
4 changed files with 4 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/seahorse
View file

@ -39,7 +39,7 @@ profile seahorse @{exec_path} {
@{exec_path} mr,
/{usr/,}bin/gpgconf rPx,
/{usr/,}bin/gpg{,2} rUx,
/{usr/,}bin/gpg{,2} rPx,
/{usr/,}bin/gpgsm rPx,
# freedesktop.org-strict

2
apparmor.d/groups/gpg/gpgconf
View file

@ -18,7 +18,7 @@ profile gpgconf @{exec_path} {
@{exec_path} mrix,
/{usr/,}bin/gpg-connect-agent rPx,
/{usr/,}bin/gpg{,2} rPUx,
/{usr/,}bin/gpg{,2} rPx,
/{usr/,}bin/gpg-agent rPx,
/{usr/,}bin/dirmngr rPx,
/{usr/,}bin/gpgsm rPx,

2
apparmor.d/groups/pacman/aurpublish
View file

@ -20,7 +20,7 @@ profile aurpublish @{exec_path} {
/{usr/,}bin/date rix,
/{usr/,}bin/gettext rix,
/{usr/,}bin/git rPx,
/{usr/,}bin/gpg{,2} rPUx,
/{usr/,}bin/gpg{,2} rPx,
/{usr/,}bin/grep rix,
/{usr/,}bin/makepkg rix,
/{usr/,}bin/mkdir rix,

2
apparmor.d/profiles-a-f/browserpass
View file

@ -15,7 +15,7 @@ profile browserpass @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
/{usr/,}bin/gpg{,2} rUx,
/{usr/,}bin/gpg{,2} rPx,
owner @{HOME}/.password-store/{,**} r,
owner @{HOME}/.mozilla/firefox/[0-9a-z]*.*/.parentlock rw,