mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-30 06:45:10 +01:00
feat(profile): tweak the new msedge profiles a bit.
This commit is contained in:
parent
fd590e9199
commit
a1d6d318cc
4 changed files with 10 additions and 6 deletions
|
@ -9,7 +9,7 @@ include <tunables/global>
|
|||
|
||||
@{name} = msedge{,-beta,-dev}
|
||||
@{domain} = com.microsoft.Edge
|
||||
@{lib_dirs} = /opt/microsoft/msedge{,-beta,-dev}
|
||||
@{lib_dirs} = /opt/microsoft/@{name}
|
||||
@{config_dirs} = @{user_config_dirs}/microsoft-edge{,-beta,-dev}
|
||||
@{cache_dirs} = @{user_cache_dirs}/microsoft-edge{,-beta,-dev}
|
||||
|
||||
|
@ -19,19 +19,23 @@ profile msedge @{exec_path} {
|
|||
include <abstractions/app/chromium>
|
||||
|
||||
@{exec_path} mrix,
|
||||
@{lib_dirs}/microsoft-edge{,beta,-dev} rpx,
|
||||
|
||||
@{bin}/man rpux, # For "chrome --help"
|
||||
@{bin}/man rPUx, # For "chrome --help"
|
||||
|
||||
@{lib_dirs}/xdg-mime rix, #-> xdg-mime,
|
||||
@{lib_dirs}/xdg-settings rix, #-> xdg-settings,
|
||||
|
||||
@{lib_dirs}/msedge_crashpad_handler rpx,
|
||||
@{lib_dirs}/microsoft-edge{,beta,-dev} rPx,
|
||||
@{lib_dirs}/msedge_crashpad_handler rPx,
|
||||
|
||||
@{lib_dirs}/*.so* mr,
|
||||
@{lib_dirs}/WidevineCdm/_platform_specific/linux_*/libwidevinecdm.so mr,
|
||||
|
||||
owner @{user_cache_dirs}/Microsoft/ rw,
|
||||
owner @{user_cache_dirs}/Microsoft/** rwk,
|
||||
|
||||
owner /tmp/.ses rw,
|
||||
owner /tmp/cv_debug.log rw,
|
||||
|
||||
include if exists <local/msedge>
|
||||
}
|
|
@ -21,7 +21,7 @@ profile msedge-sandbox @{exec_path} {
|
|||
|
||||
@{exec_path} mr,
|
||||
|
||||
@{lib_dirs}/msedge{,-beta,-dev} rpx,
|
||||
@{lib_dirs}/msedge{,-beta,-dev} rPx,
|
||||
|
||||
@{PROC} r,
|
||||
@{PROC}/@{pids}/ r,
|
|
@ -24,7 +24,7 @@ profile msedge-wrapper @{exec_path} flags=(attach_disconnected) {
|
|||
@{bin}/touch rix,
|
||||
@{bin}/which{,.debianutils} rix,
|
||||
|
||||
@{lib_dirs}/msedge rpx,
|
||||
@{lib_dirs}/msedge rPx,
|
||||
|
||||
owner @{user_config_dirs}/msedge-flags.conf r,
|
||||
|
Loading…
Reference in a new issue