From 481b6d621b719fdf21e75e2cb894762616f4c7dc Mon Sep 17 00:00:00 2001 From: nobodysu Date: Mon, 23 May 2022 20:30:46 +0300 Subject: [PATCH] pids and header --- .../abstractions/ubuntu-unity7-base.d/complete | 2 ++ apparmor.d/groups/apps/thunderbird | 12 ++++++------ 2 files changed, 8 insertions(+), 6 deletions(-) diff --git a/apparmor.d/abstractions/ubuntu-unity7-base.d/complete b/apparmor.d/abstractions/ubuntu-unity7-base.d/complete index 1776315e..a89a075a 100644 --- a/apparmor.d/abstractions/ubuntu-unity7-base.d/complete +++ b/apparmor.d/abstractions/ubuntu-unity7-base.d/complete @@ -1,3 +1,5 @@ +# apparmor.d - Full set of apparmor profiles +# SPDX-License-Identifier: GPL-2.0-only dbus send bus=session diff --git a/apparmor.d/groups/apps/thunderbird b/apparmor.d/groups/apps/thunderbird index 64beae7d..14ad56bc 100644 --- a/apparmor.d/groups/apps/thunderbird +++ b/apparmor.d/groups/apps/thunderbird @@ -131,9 +131,9 @@ profile thunderbird @{exec_path} { owner @{PROC}/@{pid}/stat r, owner @{PROC}/@{pid}/statm r, owner @{PROC}/@{pid}/smaps r, - owner @{PROC}/@{pids}/comm r, - deny owner @{PROC}/@{pids}/cmdline r, - deny owner @{PROC}/@{pids}/environ r, + owner @{PROC}/@{pid}/comm r, + deny owner @{PROC}/@{pid}/cmdline r, + deny owner @{PROC}/@{pid}/environ r, owner @{PROC}/@{pid}/task/ r, owner @{PROC}/@{pid}/task/@{tid}/stat r, # To remove the following error: @@ -141,8 +141,8 @@ profile thunderbird @{exec_path} { # (g-file-error-quark, 2) owner @{PROC}/@{pid}/mountinfo r, owner @{PROC}/@{pid}/mounts r, - deny @{PROC}/@{pid}/net/arp r, - deny @{PROC}/@{pid}/net/route r, + deny @{PROC}/@{pids}/net/arp r, + deny @{PROC}/@{pids}/net/route r, # for dig owner @{PROC}/@{pid}/task/@{tid}/comm rw, @@ -261,7 +261,7 @@ profile thunderbird @{exec_path} { owner /tmp/data.sig r, owner /tmp/data-[0-9]*.sig r, - @{PROC}/@{pid}/fd/ r, + @{PROC}/@{pids}/fd/ r, # file_inherit owner /dev/tty[0-9]* rw,