mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-30 06:45:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

feat: various mount related fixes.

Browse source 
See #152
This commit is contained in:
Alexandre Pujol 2023-04-24 12:27:05 +01:00
parent 1223b70467
commit d224aa4e6a
Failed to generate hash of commit
3 changed files with 10 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/gnome/gnome-shell-hotplug-sniffer
View file

@ -14,8 +14,8 @@ profile gnome-shell-hotplug-sniffer @{exec_path} {
/usr/share/mime/mime.cache r, /usr/share/mime/mime.cache r,
owner @{MOUNTS}/**/ r, @{MOUNTS}/**/ r,
owner @{MOUNTS}/** r, @{MOUNTS}/** r,
include if exists <local/gnome-shell-hotplug-sniffer> include if exists <local/gnome-shell-hotplug-sniffer>
} }

4
apparmor.d/groups/gvfs/gvfs-udisks2-volume-monitor
View file

@ -69,8 +69,8 @@ profile gvfs-udisks2-volume-monitor @{exec_path} flags=(attach_disconnected) {
/etc/machine-id r, /etc/machine-id r,
# Mount points # Mount points
owner @{MOUNTS}/**/ r, @{MOUNTS}/**/ r,
owner @{HOME}/**/ r, @{HOME}/**/ r,
@{run}/mount/utab r, @{run}/mount/utab r,
@{run}/systemd/inhibit/*.ref r, @{run}/systemd/inhibit/*.ref r,

12
apparmor.d/profiles-m-r/mount
View file

@ -43,12 +43,12 @@ profile mount @{exec_path} {
/var/lib/snapd/snaps/*.snap r, /var/lib/snapd/snaps/*.snap r,
# Mount points # Mount points
@{HOME}/ r, @{HOME}/ rw,
@{HOME}/*/ r, @{HOME}/*/ rw,
@{HOME}/*/*/ r, @{HOME}/*/*/ rw,
@{MOUNTS}/ r, @{MOUNTS}/ rw,
@{MOUNTS}/*/ r, @{MOUNTS}/*/ rw,
@{MOUNTS}/*/*/ r, @{MOUNTS}/*/*/ rw,
/media/cdrom[0-9]/ r, /media/cdrom[0-9]/ r,
# Mount iso/img files # Mount iso/img files