mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-14 23:43:56 +01:00
feat(profile): newer gnome want to read /.
This commit is contained in:
parent
549c6ba2f5
commit
c6c4920598
@ -38,6 +38,8 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
|
||||
/usr/share/gnome-system-monitor/{,**} r,
|
||||
/usr/share/firefox-esr/browser/chrome/icons/default/*.png r,
|
||||
|
||||
/ r,
|
||||
|
||||
owner @{tmp}/gdkpixbuf-xpm-tmp.@{rand6} rw,
|
||||
|
||||
owner @{run}/user/@{uid}/doc/ rw,
|
||||
@ -76,6 +78,8 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
|
||||
@{PROC}/diskstats r,
|
||||
@{PROC}/vmstat r,
|
||||
|
||||
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
|
||||
|
||||
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
||||
|
||||
/dev/tty rw,
|
||||
|
@ -25,6 +25,8 @@ profile fractal @{exec_path} flags=(attach_disconnected) {
|
||||
|
||||
/usr/share/xml/iso-codes/{,**} r,
|
||||
|
||||
/ r,
|
||||
|
||||
owner @{tmp}/.@{rand6} rw,
|
||||
owner @{tmp}/.goutputstream-@{rand6} rw,
|
||||
owner @{tmp}/@{rand6} rw,
|
||||
|
Loading…
Reference in New Issue
Block a user