mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-03-04 06:34:43 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Apply suggestions

Browse source
This commit is contained in:
EricLin0509 2025-02-22 10:36:01 +08:00
parent f1ad8756dd
commit 7f1576a179
Failed to generate hash of commit
3 changed files with 22 additions and 16 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/profiles-s-z/wechat
View file

@ -18,7 +18,6 @@ profile wechat @{exec_path} flags=(attach_disconnected) {
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/common/electron> include <abstractions/common/electron>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/app/bus>
network netlink raw, network netlink raw,
network netlink dgram, network netlink dgram,
@ -33,7 +32,7 @@ profile wechat @{exec_path} flags=(attach_disconnected) {
@{lib_dirs}/crashpad_handler ix, @{lib_dirs}/crashpad_handler ix,
@{bin}/mkdir ix, @{bin}/mkdir ix,
@{bin}/gawk rix, @{bin}/gawk rix,
@{bin}/lsblk rix, @{bin}/lsblk rPx,
@{bin}/ip rix, @{bin}/ip rix,
@{bin}/xdg-user-dir rix, @{bin}/xdg-user-dir rix,
@{open_path} rpx -> child-open-strict, @{open_path} rpx -> child-open-strict,

34
apparmor.d/profiles-s-z/wechat-appimage
View file

@ -11,17 +11,15 @@ include <tunables/global>
@{config_dirs} = @{user_config_dirs}/@{name} @{config_dirs} = @{user_config_dirs}/@{name}
@{cache_dirs} = @{user_cache_dirs}/@{name} @{cache_dirs} = @{user_cache_dirs}/@{name}
@{exec_path} = @{bin}/wechat @{lib_dirs}/wechat-appimage.Appimage /tmp/.mount_wechat??????/user/bin/wechat @{exec_path} = @{bin}/wechat
@{exec_path} += @{lib_dirs}/wechat-appimage.Appimage
@{exec_path} += /tmp/.mount_wechat??????/user/bin/wechat
profile wechat-appimage @{exec_path} flags=(attach_disconnected) { profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/attached/consoles> include <abstractions/attached/consoles>
include <abstractions/audio-client> include <abstractions/audio-client>
include <abstractions/common/electron> include <abstractions/common/electron>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/app/bus>
capability dac_override,
capability dac_read_search,
network netlink raw, network netlink raw,
network netlink dgram, network netlink dgram,
@ -30,6 +28,10 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
network inet6 dgram, network inet6 dgram,
network inet6 stream, network inet6 stream,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat??????/,
umount @{tmp}/.mount_wechat??????/,
@{exec_path} r, @{exec_path} r,
@{sh_path} rix, @{sh_path} rix,
@ -44,13 +46,9 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
@{tmp}/.mount_wechat??????/usr/bin/wechat ix, @{tmp}/.mount_wechat??????/usr/bin/wechat ix,
@{open_path} rpx -> child-open-strict, @{open_path} rpx -> child-open-strict,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat??????/, @{bin}/fusermount{,3} Cx -> fusermount,
@{bin}/dirname rix,
umount @{tmp}/.mount_wechat??????/, @{bin}/readlink rix,
@{bin}/fusermount{,3} ix -> fusermount,
@{bin}/dirname rix -> fusermount,
@{bin}/readlink rix -> fusermount,
@{bin}/ r, @{bin}/ r,
@{bin}/core_perl/ r, @{bin}/core_perl/ r,
@ -61,7 +59,6 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
/usr/local/sbin/ r, /usr/local/sbin/ r,
/etc/machine-id r, /etc/machine-id r,
/etc/fuse.conf r,
@{tmp}/.mount_wechat??????/AppRun r, @{tmp}/.mount_wechat??????/AppRun r,
@{tmp}/.mount_wechat??????/ rw, @{tmp}/.mount_wechat??????/ rw,
@ -79,12 +76,23 @@ profile wechat-appimage @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
capability dac_override,
capability dac_read_search,
capability sys_admin,
mount fstype=fuse.wechat-appimage.AppImage options=(ro nodev nosuid) wechat-appimage.AppImage -> @{tmp}/.mount_wechat??????/,
umount @{tmp}/.mount_wechat??????/,
@{bin}/fusermount{,3} mr, @{bin}/fusermount{,3} mr,
@{lib_dirs}/wechat-appimage.AppImage r, @{lib_dirs}/wechat-appimage.AppImage r,
@{PROC}/@{pid}/mounts r, @{PROC}/@{pid}/mounts r,
/etc/fuse.conf r,
/dev/fuse rw, /dev/fuse rw,
include if exists <local/wechat-appimage_fusermount> include if exists <local/wechat-appimage_fusermount>
} }

1
apparmor.d/profiles-s-z/wechat-universal
View file

@ -19,7 +19,6 @@ profile wechat-universal @{exec_path} flags=(attach_disconnected) {
include <abstractions/common/electron> include <abstractions/common/electron>
include <abstractions/common/bwrap> include <abstractions/common/bwrap>
include <abstractions/fontconfig-cache-read> include <abstractions/fontconfig-cache-read>
include <abstractions/app/bus>
network netlink raw, network netlink raw,
network netlink dgram, network netlink dgram,