mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
pids and header
This commit is contained in:
parent
a3f94f62b1
commit
481b6d621b
@ -1,3 +1,5 @@
|
||||
# apparmor.d - Full set of apparmor profiles
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
dbus send
|
||||
bus=session
|
||||
|
@ -131,9 +131,9 @@ profile thunderbird @{exec_path} {
|
||||
owner @{PROC}/@{pid}/stat r,
|
||||
owner @{PROC}/@{pid}/statm r,
|
||||
owner @{PROC}/@{pid}/smaps r,
|
||||
owner @{PROC}/@{pids}/comm r,
|
||||
deny owner @{PROC}/@{pids}/cmdline r,
|
||||
deny owner @{PROC}/@{pids}/environ r,
|
||||
owner @{PROC}/@{pid}/comm r,
|
||||
deny owner @{PROC}/@{pid}/cmdline r,
|
||||
deny owner @{PROC}/@{pid}/environ r,
|
||||
owner @{PROC}/@{pid}/task/ r,
|
||||
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
||||
# To remove the following error:
|
||||
@ -141,8 +141,8 @@ profile thunderbird @{exec_path} {
|
||||
# (g-file-error-quark, 2)
|
||||
owner @{PROC}/@{pid}/mountinfo r,
|
||||
owner @{PROC}/@{pid}/mounts r,
|
||||
deny @{PROC}/@{pid}/net/arp r,
|
||||
deny @{PROC}/@{pid}/net/route r,
|
||||
deny @{PROC}/@{pids}/net/arp r,
|
||||
deny @{PROC}/@{pids}/net/route r,
|
||||
# for dig
|
||||
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
|
||||
|
||||
@ -261,7 +261,7 @@ profile thunderbird @{exec_path} {
|
||||
owner /tmp/data.sig r,
|
||||
owner /tmp/data-[0-9]*.sig r,
|
||||
|
||||
@{PROC}/@{pid}/fd/ r,
|
||||
@{PROC}/@{pids}/fd/ r,
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
|
Loading…
Reference in New Issue
Block a user