mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-13 23:13:49 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

feat(tunable): remove @{user_tmp_dirs} as it refers to different kind of temp folder.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-10-08 22:59:50 +01:00
parent 28706b2a78
commit 630e785787
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
3 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
apparmor.d/groups/gpg/gpg-agent
View File

@ -53,12 +53,12 @@ profile gpg-agent @{exec_path} {
owner @{run}/user/@{uid}/gnupg/S.gpg-agent{,.ssh,.browser,.extra} rw,
owner @{run}/user/@{uid}/gnupg/sshcontrol r,
owner @{user_tmp_dirs}/**/{.,}gnupg/ rw,
owner @{user_tmp_dirs}/**/{.,}gnupg/*.conf r,
owner @{user_tmp_dirs}/**/{.,}gnupg/private-keys-v1.d/ rw,
owner @{user_tmp_dirs}/**/{.,}gnupg/private-keys-v1.d/@{hex}.key{,.tmp} rw,
owner @{user_tmp_dirs}/**/{.,}gnupg/{,d.@{rand}/}S.gpg-agent{,.ssh,.browser,.extra} rw,
owner @{user_tmp_dirs}/**/{.,}gnupg/sshcontrol r,
owner @{tmp}/**/{.,}gnupg/ rw,
owner @{tmp}/**/{.,}gnupg/*.conf r,
owner @{tmp}/**/{.,}gnupg/private-keys-v1.d/ rw,
owner @{tmp}/**/{.,}gnupg/private-keys-v1.d/@{hex}.key{,.tmp} rw,
owner @{tmp}/**/{.,}gnupg/{,d.@{rand}/}S.gpg-agent{,.ssh,.browser,.extra} rw,
owner @{tmp}/**/{.,}gnupg/sshcontrol r,
#aa:only pacman
owner /etc/pacman.d/gnupg/ rw,

1
apparmor.d/tunables/home.d/apparmor.d
View File

@ -52,7 +52,6 @@
# User build directories and output
@{user_build_dirs}="/tmp/build/"
@{user_pkg_dirs}="/tmp/pkg/"
@{user_tmp_dirs}=@{run}/user/@{uid} /tmp/
@{user_img_dirs}=@{HOME}/@{XDG_IMG_DIR} @{MOUNTS}/@{XDG_IMG_DIR}
# Other user directories

1
docs/variables.md
View File

@ -68,7 +68,6 @@ title: Variables References
| State | `@{user_state_dirs}` | ` @{HOME}/@{XDG_STATE_DIR}` |
| Build | `@{user_build_dirs}` | `/tmp/build/` |
| Packages | `@{user_pkg_dirs}` | `/tmp/pkg/` |
| Tmp | `@{user_tmp_dirs}` | `@{run}/user/@{uid} /tmp/` |
</figure>