mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
Fix access to translations and /tmp in run-time
Flameshot access to /usr/share/flameshot for search translations for UI. And have access to /tmp for create tempfile for other apps (ex: send image to GIMP)
This commit is contained in:
parent
31cb3e962d
commit
3748a13710
@ -35,6 +35,7 @@ profile flameshot @{exec_path} {
|
|||||||
|
|
||||||
/var/lib/dbus/machine-id r,
|
/var/lib/dbus/machine-id r,
|
||||||
/etc/machine-id r,
|
/etc/machine-id r,
|
||||||
|
/usr/share/flameshot/translations/* r,
|
||||||
|
|
||||||
owner @{user_config_dirs}/dconf/user r,
|
owner @{user_config_dirs}/dconf/user r,
|
||||||
owner @{user_config_dirs}/flameshot/ rw,
|
owner @{user_config_dirs}/flameshot/ rw,
|
||||||
@ -43,7 +44,10 @@ profile flameshot @{exec_path} {
|
|||||||
owner @{run}/user/@{uid}/dconf/user rw,
|
owner @{run}/user/@{uid}/dconf/user rw,
|
||||||
|
|
||||||
owner @{tmp}/*= rw,
|
owner @{tmp}/*= rw,
|
||||||
|
owner @{tmp}/*.png rw,
|
||||||
owner @{tmp}/qipc_{systemsem,sharedmemory}_*@{hex} rw,
|
owner @{tmp}/qipc_{systemsem,sharedmemory}_*@{hex} rw,
|
||||||
|
owner @{tmp}/.@{rand8}/ rw,
|
||||||
|
owner @{tmp}/.@{rand8}/** rw,
|
||||||
owner /dev/shm/#@{int} rw,
|
owner /dev/shm/#@{int} rw,
|
||||||
|
|
||||||
@{PROC}/sys/kernel/random/boot_id r,
|
@{PROC}/sys/kernel/random/boot_id r,
|
||||||
|
Loading…
Reference in New Issue
Block a user