mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-02-03 08:45:06 +01:00
fix(profile): ensure keepass can check program calling its secret service.
fix #582
This commit is contained in:
parent
b0436029f0
commit
d448e3ea08
1 changed files with 7 additions and 6 deletions
|
@ -83,12 +83,13 @@ profile keepassxc @{exec_path} {
|
|||
owner @{run}/user/@{uid}/org.keepassxc.KeePassXC.BrowserServer w,
|
||||
owner @{run}/user/@{uid}/org.keepassxc.KeePassXC/ w,
|
||||
|
||||
@{PROC}/@{pids}/comm r,
|
||||
@{PROC}/modules r,
|
||||
owner @{PROC}/@{pid}/mountinfo r,
|
||||
owner @{PROC}/@{pid}/mounts r,
|
||||
deny @{PROC}/sys/kernel/random/boot_id r,
|
||||
deny owner @{PROC}/@{pid}/cmdline r,
|
||||
@{PROC}/@{pid}/comm r,
|
||||
@{PROC}/@{pid}/stat r,
|
||||
@{PROC}/modules r,
|
||||
@{PROC}/sys/kernel/random/boot_id r,
|
||||
owner @{PROC}/@{pid}/cmdline r,
|
||||
owner @{PROC}/@{pid}/mountinfo r,
|
||||
owner @{PROC}/@{pid}/mounts r,
|
||||
|
||||
/dev/shm/#@{int} rw,
|
||||
/dev/tty rw,
|
||||
|
|
Loading…
Reference in a new issue