mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

pids and header

Browse Source
This commit is contained in:
nobodysu 2022-05-23 20:30:46 +03:00
parent a3f94f62b1
commit 481b6d621b
2 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apparmor.d/abstractions/ubuntu-unity7-base.d/complete
View File

@ -1,3 +1,5 @@
# apparmor.d - Full set of apparmor profiles
# SPDX-License-Identifier: GPL-2.0-only
dbus send dbus send
bus=session bus=session

12
apparmor.d/groups/apps/thunderbird
View File

@ -131,9 +131,9 @@ profile thunderbird @{exec_path} {
owner @{PROC}/@{pid}/stat r, owner @{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/statm r, owner @{PROC}/@{pid}/statm r,
owner @{PROC}/@{pid}/smaps r, owner @{PROC}/@{pid}/smaps r,
owner @{PROC}/@{pids}/comm r, owner @{PROC}/@{pid}/comm r,
deny owner @{PROC}/@{pids}/cmdline r, deny owner @{PROC}/@{pid}/cmdline r,
deny owner @{PROC}/@{pids}/environ r, deny owner @{PROC}/@{pid}/environ r,
owner @{PROC}/@{pid}/task/ r, owner @{PROC}/@{pid}/task/ r,
owner @{PROC}/@{pid}/task/@{tid}/stat r, owner @{PROC}/@{pid}/task/@{tid}/stat r,
# To remove the following error: # To remove the following error:
@ -141,8 +141,8 @@ profile thunderbird @{exec_path} {
# (g-file-error-quark, 2) # (g-file-error-quark, 2)
owner @{PROC}/@{pid}/mountinfo r, owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r, owner @{PROC}/@{pid}/mounts r,
deny @{PROC}/@{pid}/net/arp r, deny @{PROC}/@{pids}/net/arp r,
deny @{PROC}/@{pid}/net/route r, deny @{PROC}/@{pids}/net/route r,
# for dig # for dig
owner @{PROC}/@{pid}/task/@{tid}/comm rw, owner @{PROC}/@{pid}/task/@{tid}/comm rw,
@ -261,7 +261,7 @@ profile thunderbird @{exec_path} {
owner /tmp/data.sig r, owner /tmp/data.sig r,
owner /tmp/data-[0-9]*.sig r, owner /tmp/data-[0-9]*.sig r,
@{PROC}/@{pid}/fd/ r, @{PROC}/@{pids}/fd/ r,
# file_inherit # file_inherit
owner /dev/tty[0-9]* rw, owner /dev/tty[0-9]* rw,