diff --git a/apparmor.d/groups/browsers/brave-crashpad-handler b/apparmor.d/groups/browsers/brave-crashpad-handler index 120fa9fd..e86754a0 100644 --- a/apparmor.d/groups/browsers/brave-crashpad-handler +++ b/apparmor.d/groups/browsers/brave-crashpad-handler @@ -23,9 +23,9 @@ profile brave-crashpad-handler @{exec_path} { @{exec_path} mrix, - owner @{user_config_dirs}/BraveSoftware/Brave-Browser/CrashpadMetrics-active.pma rw, - owner @{user_config_dirs}/BraveSoftware/Brave-Browser/CrashpadMetrics.pma rw, owner "@{config_dirs}/Crash Reports/**" rwk, + owner @{config_dirs}/CrashpadMetrics-active.pma rw, + owner @{config_dirs}/CrashpadMetrics.pma rw, @{PROC}/sys/kernel/yama/ptrace_scope r, owner @{PROC}/@{pid}/fd/ r, diff --git a/apparmor.d/groups/browsers/chrome-wrapper b/apparmor.d/groups/browsers/chrome-wrapper index 54a7e7d1..9431b26c 100644 --- a/apparmor.d/groups/browsers/chrome-wrapper +++ b/apparmor.d/groups/browsers/chrome-wrapper @@ -10,7 +10,7 @@ include @{lib_dirs} = /opt/google/chrome{,-beta,-unstable} @{exec_path} = @{lib_dirs}/google-chrome{,-beta,-unstable} -profile chrome-wrapper @{exec_path} { +profile chrome-wrapper @{exec_path} flags=(attach_disconnected) { include include diff --git a/apparmor.d/groups/browsers/firefox b/apparmor.d/groups/browsers/firefox index 57982e4b..445b3d18 100644 --- a/apparmor.d/groups/browsers/firefox +++ b/apparmor.d/groups/browsers/firefox @@ -53,18 +53,10 @@ profile firefox @{exec_path} flags=(attach_disconnected) { signal (send) set=(term, kill) peer=keepassxc-proxy, signal (send) set=(term, kill) peer=firefox-*, - dbus bind bus=session name=org.mozilla.firefox.*, - dbus bind bus=session name=org.mpris.MediaPlayer2.firefox.*, - dbus bind bus=session name=org.mozilla.firefox_beta.*, - deny dbus send bus=system path=/org/freedesktop/hostname1, + # dbus: own bus=session name=org.mozilla.firefox + # dbus: own bus=session name=org.mozilla.firefox_beta - dbus bind bus=session name=org.mozilla.firefox.*, - dbus receive bus=session path=/org/mozilla/firefox/* - interface=org.mozilla.firefox - peer=(name=:*, label=@{profile_name}), - dbus send bus=session path=/org/mozilla/firefox/* - interface=org.mozilla.firefox - peer=(name=org.mozilla.firefox.*, label=@{profile_name}), + deny dbus send bus=system path=/org/freedesktop/hostname1, dbus bind bus=session name=org.mpris.MediaPlayer2.firefox.*, dbus (send, receive) bus=session path=/org/mpris/MediaPlayer2