mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-23 19:38:12 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

fix(profile): child-open-any

Browse source 
See #647
This commit is contained in:
Alexandre Pujol 2025-01-20 21:26:54 +01:00
parent 693259d8c1
commit 2f98d0817e
Failed to generate hash of commit
1 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/children/child-open-any
View file

@ -11,11 +11,11 @@ abi <abi/4.0>,
include <tunables/global>
profile child-open-any flags=(attach_disconnected) {
profile child-open-any flags=(attach_disconnected,mediate_deleted) {
include <abstractions/base>
include <abstractions/desktop>
@{open_path} mr,
@{open_path} mrix,
@{sh_path} r,
@ -32,6 +32,8 @@ profile child-open-any flags=(attach_disconnected) {
/usr/ r,
/usr/local/bin/ r,
owner @{run}/user/@{uid}/kioclient@{rand6}.@{int}.kioworker.socket rwl -> @{run}/user/@{uid}/#@{int},
/dev/tty rw,
include if exists <usr/child-open-any.d>