mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-19 09:28:17 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): improve the use of org.chromium.Chromium.@{rand6}.

Browse source
This commit is contained in:
Alexandre Pujol 2024-09-10 18:20:41 +01:00
parent 50b0e09a9a
commit 49b8967bb2
Failed to generate hash of commit
3 changed files with 3 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/browsers/brave
View file

@ -8,7 +8,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{name} = brave{,-beta,-dev,-bin} @{name} = brave{,-beta,-dev,-bin}
@{domain} = com.brave.Brave @{domain} = com.brave.Brave org.chromium.Chromium
@{lib_dirs} = /opt/brave{-bin,.com}{,/@{name}} @{lib_dirs} = /opt/brave{-bin,.com}{,/@{name}}
@{config_dirs} = @{user_config_dirs}/BraveSoftware/Brave-Browser{,-Beta,-Dev} @{config_dirs} = @{user_config_dirs}/BraveSoftware/Brave-Browser{,-Beta,-Dev}
@{cache_dirs} = @{user_cache_dirs}/BraveSoftware/Brave-Browser{,-Beta,-Dev} @{cache_dirs} = @{user_cache_dirs}/BraveSoftware/Brave-Browser{,-Beta,-Dev}
@ -43,11 +43,6 @@ profile brave @{exec_path} {
owner @{tmp}/net-export/ rw, # For brave://net-export/ owner @{tmp}/net-export/ rw, # For brave://net-export/
owner @{tmp}/.org.chromium.Chromium.* rwk,
owner @{tmp}/.org.chromium.Chromium*/{,**} rw,
owner /dev/shm/.org.chromium.Chromium.* rw,
# Silencer # Silencer
deny /etc/opt/chrome/ w, deny /etc/opt/chrome/ w,
deny /dev/disk/by-uuid/ r, deny /dev/disk/by-uuid/ r,

2
apparmor.d/groups/gnome/gnome-shell
View file

@ -294,7 +294,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
owner @{run}/user/@{uid}/snap.snap*/wayland-cursor-shared-* rw, owner @{run}/user/@{uid}/snap.snap*/wayland-cursor-shared-* rw,
owner @{run}/user/@{uid}/systemd/notify rw, owner @{run}/user/@{uid}/systemd/notify rw,
owner /dev/shm/.org.chromium.Chromium.* rw, owner /dev/shm/.org.chromium.Chromium.@{rand6} rw,
owner /dev/shm/wayland.mozilla.ipc.@{int} rw, owner /dev/shm/wayland.mozilla.ipc.@{int} rw,
/tmp/.X@{int}-lock rw, /tmp/.X@{int}-lock rw,

2
apparmor.d/profiles-g-l/git
View file

@ -105,7 +105,7 @@ profile git @{exec_path} flags=(attach_disconnected) {
deny owner @{user_share_dirs}/gvfs-metadata/* r, deny owner @{user_share_dirs}/gvfs-metadata/* r,
deny owner @{user_share_dirs}/zed/**/data.mdb rw, deny owner @{user_share_dirs}/zed/**/data.mdb rw,
deny /usr/share/nvidia/nvidia-application-profiles-* r, deny /usr/share/nvidia/nvidia-application-profiles-* r,
deny /dev/shm/.org.chromium.Chromium* rw, deny /dev/shm/.org.chromium.Chromium.@{rand6} rw,
profile gpg flags=(attach_disconnected) { profile gpg flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>