mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

polishing

Browse source
This commit is contained in:
nobody43 2023-02-21 15:24:03 +00:00 committed by Alex
parent 8b4407ca02
commit 7e3bb8b1ea
3 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/browsers/firefox
View file

@ -110,12 +110,12 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
dbus send bus=session path=/org/mozilla/firefox/Remote
interface=org.mozilla.firefox
member=OpenURL
peer=(name=org.mozilla.firefox.* label=@{profile_name}),
peer=(name=org.mozilla.firefox.*, label=@{profile_name}),
dbus receive bus=session path=/org/mozilla/firefox/Remote
interface=org.mozilla.firefox
member=OpenURL
peer=(name=:* label=@{profile_name}),
peer=(name=:*, label=@{profile_name}),
dbus bind bus=session
name=org.mpris.MediaPlayer2.firefox.*,

4
apparmor.d/groups/systemd/loginctl
View file

@ -24,12 +24,12 @@ profile loginctl @{exec_path} {
dbus (send) bus=system path=/org/freedesktop/login[0-9]*
interface=org.freedesktop.login[0-9]*.Manager
member={ListSessions,GetSession}
peer=(name=org.freedesktop.login[0-9]* label=systemd-logind),
peer=(name=org.freedesktop.login[0-9]*, label=systemd-logind),
dbus (send) bus=system path=/org/freedesktop/login[0-9]*/session/**
interface=org.freedesktop.DBus.Properties
member={Get,GetAll}
peer=(name=org.freedesktop.login[0-9]* label=systemd-logind),
peer=(name=org.freedesktop.login[0-9]*, label=systemd-logind),
include if exists <local/loginctl>
}

2
apparmor.d/profiles-m-r/rustdesk
View file

@ -120,7 +120,7 @@ profile rustdesk @{exec_path} {
owner @{HOME}/.xsession-errors w,
# Do not reveal username (pop-up only)
deny /etc/passwd r,
# deny /etc/passwd r,
# It's possible to disable root-based service ('systemctl disable rustdesk.service') and use RD only on-demand (or as client-only). After that, sudo isn't necessary.
# deny /{,usr/}bin/sudo x,