fix(profile): ensure keepass can check program calling its secret service.

fix #582
This commit is contained in:
Alexandre Pujol 2024-11-10 19:23:02 +00:00
parent b0436029f0
commit d448e3ea08
Failed to generate hash of commit

View file

@ -83,12 +83,13 @@ profile keepassxc @{exec_path} {
owner @{run}/user/@{uid}/org.keepassxc.KeePassXC.BrowserServer w,
owner @{run}/user/@{uid}/org.keepassxc.KeePassXC/ w,
@{PROC}/@{pids}/comm r,
@{PROC}/modules r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
deny @{PROC}/sys/kernel/random/boot_id r,
deny owner @{PROC}/@{pid}/cmdline r,
@{PROC}/@{pid}/comm r,
@{PROC}/@{pid}/stat r,
@{PROC}/modules r,
@{PROC}/sys/kernel/random/boot_id r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
/dev/shm/#@{int} rw,
/dev/tty rw,