mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-30 23:05:11 +01:00
Minor fixes.
This commit is contained in:
parent
3734e5aedf
commit
7be8aca10d
5 changed files with 8 additions and 26 deletions
|
@ -32,7 +32,6 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
# Silencer for non user's data
|
# Silencer for non user's data
|
||||||
deny /boot rw,
|
deny /boot rw,
|
||||||
# deny /var rw,
|
|
||||||
deny /opt rw,
|
deny /opt rw,
|
||||||
deny /root rw,
|
deny /root rw,
|
||||||
deny /tmp/.* rw,
|
deny /tmp/.* rw,
|
||||||
|
|
|
@ -18,12 +18,12 @@ profile gvfsd-archive @{exec_path} {
|
||||||
owner @{HOME}/**.{tar,tar.gz,zip} r,
|
owner @{HOME}/**.{tar,tar.gz,zip} r,
|
||||||
owner /media/**.{TAR,TAR.GZ,ZIP} r,
|
owner /media/**.{TAR,TAR.GZ,ZIP} r,
|
||||||
owner @{HOME}/**.{tar,tar.gz,zip} r,
|
owner @{HOME}/**.{tar,tar.gz,zip} r,
|
||||||
owner /media/**.{TAR,TAR.GZ,ZIP} r,
|
owner /mnt/**.{TAR,TAR.GZ,ZIP} r,
|
||||||
|
|
||||||
owner @{HOME}/**.{iso,img,bin,mdf,nrg} r,
|
owner @{HOME}/**.{iso,img,bin,mdf,nrg} r,
|
||||||
owner /media/*/**.{iso,img,bin,mdf,nrg} r,
|
owner /media/*/**.{iso,img,bin,mdf,nrg} r,
|
||||||
owner @{HOME}/**.{ISO,IMG,BIN,MDF,NRG} r,
|
owner @{HOME}/**.{ISO,IMG,BIN,MDF,NRG} r,
|
||||||
owner /media/*/**.{ISO,IMG,BIN,MDF,NRG} r,
|
owner /mnt/*/**.{ISO,IMG,BIN,MDF,NRG} r,
|
||||||
|
|
||||||
include if exists <local/gvfsd-archive>
|
include if exists <local/gvfsd-archive>
|
||||||
}
|
}
|
||||||
|
|
|
@ -1,13 +1,6 @@
|
||||||
# vim:syntax=apparmor
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# ------------------------------------------------------------------
|
|
||||||
#
|
|
||||||
# Copyright (C) 2021 Mikhail Morfikov
|
# Copyright (C) 2021 Mikhail Morfikov
|
||||||
#
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
# This program is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2 of the GNU General Public
|
|
||||||
# License published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
abi <abi/3.0>,
|
abi <abi/3.0>,
|
||||||
|
|
||||||
|
|
|
@ -1,13 +1,6 @@
|
||||||
# vim:syntax=apparmor
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# ------------------------------------------------------------------
|
|
||||||
#
|
|
||||||
# Copyright (C) 2021 Mikhail Morfikov
|
# Copyright (C) 2021 Mikhail Morfikov
|
||||||
#
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
# This program is free software; you can redistribute it and/or
|
|
||||||
# modify it under the terms of version 2 of the GNU General Public
|
|
||||||
# License published by the Free Software Foundation.
|
|
||||||
#
|
|
||||||
# ------------------------------------------------------------------
|
|
||||||
|
|
||||||
abi <abi/3.0>,
|
abi <abi/3.0>,
|
||||||
|
|
||||||
|
|
|
@ -3,8 +3,6 @@
|
||||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-3.0-only
|
# SPDX-License-Identifier: GPL-3.0-only
|
||||||
|
|
||||||
# Version of program profiled: 247.3
|
|
||||||
|
|
||||||
abi <abi/3.0>,
|
abi <abi/3.0>,
|
||||||
include <tunables/global>
|
include <tunables/global>
|
||||||
|
|
||||||
|
@ -14,7 +12,6 @@ profile systemd-resolved @{exec_path} {
|
||||||
include <abstractions/nameservice-strict>
|
include <abstractions/nameservice-strict>
|
||||||
include <abstractions/p11-kit>
|
include <abstractions/p11-kit>
|
||||||
include <abstractions/ssl_certs>
|
include <abstractions/ssl_certs>
|
||||||
# include <abstractions/krathalans-networking>
|
|
||||||
|
|
||||||
capability net_bind_service,
|
capability net_bind_service,
|
||||||
capability net_raw,
|
capability net_raw,
|
||||||
|
|
Loading…
Reference in a new issue