mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-18 00:48:10 +01:00
cleanup
This commit is contained in:
nobody43
Alex
parent
670411c114
commit
c4edf2a6c7
39 changed files with 0 additions and 46 deletions
|
|
@ -209,7 +209,6 @@ profile android-studio @{exec_path} {
|
|||
|
||||
/usr/share/hwdata/pnp.ids r,
|
||||
|
||||
|
||||
/var/lib/dbus/machine-id r,
|
||||
/etc/machine-id r,
|
||||
|
||||
|
|
|
|||
|
|
@ -95,7 +95,6 @@ profile atom @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
# Needed or atom gets crash with the following error:
|
||||
# FATAL:proc_util.cc(36)] : Permission denied (13)
|
||||
@{PROC}/ r,
|
||||
|
|
|
|||
|
|
@ -69,7 +69,6 @@ profile code @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
# Needed or code gets crash with the following error:
|
||||
# FATAL:proc_util.cc(36)] : Permission denied (13)
|
||||
@{PROC}/ r,
|
||||
|
|
|
|||
|
|
@ -89,10 +89,6 @@ profile discord @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
# To avoid the following error:
|
||||
# kernel: traps: Discord[] trap int3 ip:7fa5b7541885 sp:7ffff5539c40 error:0
|
||||
# in libglib-2.0.so.0.6000.6[7fa5b7508000+80000]
|
||||
|
||||
deny @{sys}/devices/system/cpu/cpufreq/policy[0-9]/cpuinfo_max_freq r,
|
||||
deny @{sys}/devices/virtual/tty/tty[0-9]/active r,
|
||||
# To remove the following error:
|
||||
|
|
|
|||
|
|
@ -68,7 +68,6 @@ profile freetube @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
owner @{user_share_dirs} r,
|
||||
|
||||
deny @{sys}/devices/virtual/tty/tty0/active r,
|
||||
|
|
|
|||
|
|
@ -75,7 +75,6 @@ profile signal-desktop @{exec_path} {
|
|||
/var/lib/dbus/machine-id r,
|
||||
/etc/machine-id r,
|
||||
|
||||
|
||||
# No new privs
|
||||
/{usr/,}bin/xdg-settings rPx,
|
||||
|
||||
|
|
|
|||
|
|
@ -75,8 +75,6 @@ profile telegram-desktop @{exec_path} {
|
|||
/var/lib/dbus/machine-id r,
|
||||
/etc/machine-id r,
|
||||
|
||||
# Needed when saving files as, or otherwise the app crashes
|
||||
|
||||
/usr/share/hwdata/pnp.ids r,
|
||||
|
||||
owner @{HOME}/.config/qt5ct/{,**} r,
|
||||
|
|
|
|||
|
|
@ -145,8 +145,6 @@ profile thunderbird @{exec_path} {
|
|||
owner @{HOME}/Mail/** rwl -> @{HOME}/Mail/**,
|
||||
owner @{user_share_dirs}/ r,
|
||||
|
||||
# Fix error in libglib while saving files as
|
||||
|
||||
# Spellcheck
|
||||
/{usr/,}bin/locale rix,
|
||||
|
||||
|
|
|
|||
|
|
@ -147,7 +147,6 @@ profile synaptic @{exec_path} {
|
|||
# errorcode: 2
|
||||
/dev/ptmx rw,
|
||||
|
||||
|
||||
/etc/fstab r,
|
||||
|
||||
# Synaptic is a GUI app started by root, so without "owner"
|
||||
|
|
|
|||
|
|
@ -62,7 +62,6 @@ profile gvfs-udisks2-volume-monitor @{exec_path} flags=(attach_disconnected) {
|
|||
/{usr/,}bin/mount rPx,
|
||||
/{usr/,}bin/umount rPx,
|
||||
|
||||
|
||||
/var/lib/gdm{3,}/.config/dconf/user r,
|
||||
|
||||
/ r,
|
||||
|
|
|
|||
|
|
@ -22,6 +22,5 @@ profile gvfsd-ftp @{exec_path} {
|
|||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
||||
include if exists <local/gvfsd-ftp>
|
||||
}
|
||||
|
|
|
|||
|
|
@ -24,7 +24,6 @@ profile gvfsd-http @{exec_path} {
|
|||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
||||
owner @{run}/user/@{uid}/gvfsd/socket-* rw,
|
||||
|
||||
include if exists <local/gvfsd-http>
|
||||
|
|
|
|||
|
|
@ -20,7 +20,6 @@ profile gvfsd-mtp @{exec_path} {
|
|||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
||||
owner @{HOME}/{,**} rw,
|
||||
owner @{MOUNTS}/{,**} rw,
|
||||
|
||||
|
|
|
|||
|
|
@ -21,7 +21,6 @@ profile gvfsd-smb @{exec_path} {
|
|||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
||||
/etc/samba/smb.conf r,
|
||||
|
||||
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
|
||||
|
|
|
|||
|
|
@ -82,7 +82,6 @@ profile arduino @{exec_path} {
|
|||
owner @{run}/lock/tmp* rw,
|
||||
owner @{run}/lock/LCK..ttyS[0-9]* rw,
|
||||
|
||||
|
||||
owner @{PROC}/@{pid}/fd/ r,
|
||||
owner @{PROC}/@{pid}/coredump_filter rw,
|
||||
owner @{PROC}/@{pid}/mountinfo r,
|
||||
|
|
|
|||
|
|
@ -51,7 +51,6 @@ profile atril @{exec_path} {
|
|||
|
||||
/usr/share/atril/{,**} r,
|
||||
|
||||
|
||||
owner @{PROC}/@{pid}/fd/ r,
|
||||
owner @{PROC}/@{pid}/mountinfo r,
|
||||
owner @{PROC}/@{pid}/mounts r,
|
||||
|
|
|
|||
|
|
@ -39,7 +39,6 @@ profile cawbird @{exec_path} {
|
|||
owner @{user_cache_dirs}/ rw,
|
||||
owner @{user_cache_dirs}/cawbird-* rw,
|
||||
|
||||
|
||||
/usr/share/xml/iso-codes/iso_[0-9]*-[0-9]*.xml r,
|
||||
|
||||
/var/lib/dbus/machine-id r,
|
||||
|
|
|
|||
|
|
@ -37,7 +37,6 @@ profile czkawka-gui @{exec_path} {
|
|||
|
||||
@{sys}/fs/cgroup/{,**} r,
|
||||
|
||||
|
||||
profile open {
|
||||
include <abstractions/base>
|
||||
include <abstractions/xdg-open>
|
||||
|
|
|
|||
|
|
@ -47,7 +47,6 @@ profile deltachat-desktop @{exec_path} {
|
|||
owner @{HOME}/.config/DeltaChat/ rw,
|
||||
owner @{HOME}/.config/DeltaChat/** rwk,
|
||||
|
||||
|
||||
owner /tmp/@{hex}/ rw,
|
||||
owner /tmp/@{hex}/db.sqlite-blobs/ rw,
|
||||
owner /tmp/@{hex}/db.sqlite rwk,
|
||||
|
|
|
|||
|
|
@ -31,7 +31,6 @@ profile dino-im @{exec_path} {
|
|||
/{usr/,}bin/gpgconf rCx -> gpg,
|
||||
/{usr/,}bin/gpgsm rCx -> gpg,
|
||||
|
||||
|
||||
owner @{user_share_dirs}/dino/ rw,
|
||||
owner @{user_share_dirs}/dino/** rwk,
|
||||
|
||||
|
|
|
|||
|
|
@ -121,11 +121,9 @@ profile engrampa @{exec_path} {
|
|||
/usr/share/engrampa/{,**} r,
|
||||
|
||||
/usr/share/**.desktop r,
|
||||
/usr/share/**/icons/**.png r,
|
||||
|
||||
/etc/magic r,
|
||||
|
||||
|
||||
# gnome-tiny
|
||||
@{run}/mount/utab r,
|
||||
|
||||
|
|
|
|||
|
|
@ -47,7 +47,6 @@ profile exo-helper @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
|
||||
|
|
|
|||
|
|
@ -29,7 +29,6 @@ profile font-manager @{exec_path} {
|
|||
/{usr/,}lib/@{multiarch}/webkit*gtk-*/WebKitWebProcess rix,
|
||||
/{usr/,}lib/@{multiarch}/webkit*gtk-*/WebKitNetworkProcess rix,
|
||||
|
||||
|
||||
owner @{user_cache_dirs}/ rw,
|
||||
owner @{user_cache_dirs}/font-manager/ rw,
|
||||
owner @{user_cache_dirs}/font-manager/* rwk,
|
||||
|
|
|
|||
|
|
@ -84,7 +84,6 @@ profile gajim @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
/usr/share/xml/iso-codes/iso_[0-9]*-[0-9]*.xml r,
|
||||
|
||||
# TMP files locations (first in /tmp/ , /var/tmp/ and @{HOME}/)
|
||||
|
|
|
|||
|
|
@ -62,7 +62,6 @@ profile ganyremote @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
# Doc dirs
|
||||
deny /usr/local/share/ r,
|
||||
deny /usr/share/ r,
|
||||
|
|
|
|||
|
|
@ -131,7 +131,6 @@ profile gpartedbin @{exec_path} {
|
|||
/var/lib/dbus/machine-id r,
|
||||
/etc/machine-id r,
|
||||
|
||||
|
||||
@{run}/mount/utab r,
|
||||
|
||||
# For fsck of the btrfs filesystem
|
||||
|
|
|
|||
|
|
@ -44,7 +44,6 @@ profile gpodder @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
owner /var/tmp/etilqs_@{hex} rw,
|
||||
|
||||
/etc/mime.types r,
|
||||
|
|
|
|||
|
|
@ -56,7 +56,6 @@ profile gsmartcontrol @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
/var/lib/dbus/machine-id r,
|
||||
/etc/machine-id r,
|
||||
|
||||
|
|
|
|||
|
|
@ -76,7 +76,6 @@ profile hypnotix @{exec_path} {
|
|||
|
||||
/dev/ r,
|
||||
|
||||
|
||||
/etc/vdpau_wrapper.cfg r,
|
||||
|
||||
/var/lib/dbus/machine-id r,
|
||||
|
|
|
|||
|
|
@ -41,7 +41,6 @@ profile jami-gnome @{exec_path} {
|
|||
/{usr/,}lib/@{multiarch}/webkit2gtk-4.0/WebKitNetworkProcess rix,
|
||||
/{usr/,}lib/@{multiarch}/webkit2gtk-4.0/WebKitWebProcess rix,
|
||||
|
||||
|
||||
/usr/share/ring/{,**} r,
|
||||
/usr/share/sounds/jami-gnome/{,**} r,
|
||||
|
||||
|
|
|
|||
|
|
@ -20,7 +20,6 @@ profile light-locker @{exec_path} {
|
|||
|
||||
@{exec_path} mr,
|
||||
|
||||
|
||||
@{PROC}/1/cgroup r,
|
||||
owner @{PROC}/@{pid}/cgroup r,
|
||||
|
||||
|
|
|
|||
|
|
@ -55,7 +55,6 @@ profile mediainfo-gui @{exec_path} {
|
|||
owner @{MOUNTS}/**/ r,
|
||||
owner /{home,media}/**.@{mediainfo_ext} r,
|
||||
|
||||
|
||||
profile open {
|
||||
include <abstractions/base>
|
||||
include <abstractions/xdg-open>
|
||||
|
|
|
|||
|
|
@ -32,7 +32,6 @@ profile obconf @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
|
||||
|
|
|
|||
|
|
@ -32,7 +32,6 @@ profile pulseeffects @{exec_path} {
|
|||
owner @{PROC}/@{pid}/cmdline r,
|
||||
owner @{PROC}/@{pid}/fd/ r,
|
||||
|
||||
|
||||
# file_inherit
|
||||
owner /dev/tty[0-9]* rw,
|
||||
|
||||
|
|
|
|||
|
|
@ -36,14 +36,12 @@ profile udiskie @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
# Allowed apps to open
|
||||
/{usr/,}bin/spacefm rPx,
|
||||
|
||||
# Silencer
|
||||
deny /{usr/,}lib/** w,
|
||||
|
||||
|
||||
profile open {
|
||||
include <abstractions/base>
|
||||
include <abstractions/xdg-open>
|
||||
|
|
|
|||
|
|
@ -38,7 +38,6 @@ profile utox @{exec_path} {
|
|||
|
||||
deny owner @{PROC}/@{pid}/cmdline r,
|
||||
|
||||
|
||||
profile open {
|
||||
include <abstractions/base>
|
||||
include <abstractions/xdg-open>
|
||||
|
|
|
|||
|
|
@ -32,7 +32,6 @@ profile volumeicon @{exec_path} {
|
|||
/var/lib/dbus/machine-id r,
|
||||
/etc/machine-id r,
|
||||
|
||||
|
||||
# Start the PulseAudio sound mixer
|
||||
/{usr/,}bin/{,ba,da}sh rix,
|
||||
/{usr/,}bin/pavucontrol rPUx,
|
||||
|
|
|
|||
|
|
@ -72,7 +72,6 @@ profile wireshark @{exec_path} {
|
|||
|
||||
/etc/fstab r,
|
||||
|
||||
|
||||
/usr/share/hwdata/pnp.ids r,
|
||||
|
||||
/usr/share/GeoIP/{,**} r,
|
||||
|
|
|
|||
|
|
@ -57,7 +57,6 @@ profile xarchiver @{exec_path} {
|
|||
/tmp/ r,
|
||||
owner /tmp/** rw,
|
||||
|
||||
|
||||
owner @{PROC}/@{pid}/fd/ r,
|
||||
@{PROC}/@{pid}/mountinfo r,
|
||||
@{PROC}/@{pid}/mounts r,
|
||||
|
|
|
|||
Loading…
Reference in a new issue