mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
fix(xdg-document-portal): use abstractions/nameservice-strict
This commit is contained in:
parent
11e05037c3
commit
2ea558c146
@ -12,6 +12,7 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
|
|||||||
include <abstractions/bus-session>
|
include <abstractions/bus-session>
|
||||||
include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore>
|
include <abstractions/bus/org.freedesktop.impl.portal.PermissionStore>
|
||||||
include <abstractions/deny-sensitive-home>
|
include <abstractions/deny-sensitive-home>
|
||||||
|
include <abstractions/nameservice-strict>
|
||||||
|
|
||||||
capability sys_admin,
|
capability sys_admin,
|
||||||
capability sys_nice,
|
capability sys_nice,
|
||||||
@ -35,9 +36,6 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
|
|||||||
|
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
/etc/nsswitch.conf r,
|
|
||||||
/etc/passwd r,
|
|
||||||
|
|
||||||
@{bin}/flatpak rPUx,
|
@{bin}/flatpak rPUx,
|
||||||
@{bin}/fusermount{,3} rCx -> fusermount,
|
@{bin}/fusermount{,3} rCx -> fusermount,
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user