mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-12-28 16:06:54 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): firefox: handle nnp with keepassxc-proxy.

Browse source
This commit is contained in:
Alexandre Pujol 2024-09-20 23:34:03 +01:00
parent 8979d84633
commit e15bdcc9ad
Failed to generate hash of commit
3 changed files with 7 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/abstractions/app/firefox
View file

@ -105,8 +105,6 @@
owner /dev/shm/org.mozilla.ipc.@{pid}.@{int} rw, owner /dev/shm/org.mozilla.ipc.@{pid}.@{int} rw,
owner /dev/shm/wayland.mozilla.ipc.@{int} rw, owner /dev/shm/wayland.mozilla.ipc.@{int} rw,
owner @{run}/user/@{uid}/org.keepassxc.KeePassXC.BrowserServer w,
@{run}/mount/utab r, @{run}/mount/utab r,
@{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad @{run}/udev/data/+input:input@{int} r, # for mouse, keyboard, touchpad

7
apparmor.d/groups/browsers/firefox
View file

@ -19,7 +19,7 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
include <abstractions/user-download-strict> include <abstractions/user-download-strict>
include <abstractions/user-read-strict> include <abstractions/user-read-strict>
signal (send) set=(term, kill) peer=keepassxc-proxy, signal send set=(term, kill) peer=firefox//&keepassxc-proxy,
#aa:dbus own bus=session name=org.mozilla.firefox #aa:dbus own bus=session name=org.mozilla.firefox
#aa:dbus own bus=session name=org.mpris.MediaPlayer2.firefox path=/org/mpris/MediaPlayer2 #aa:dbus own bus=session name=org.mpris.MediaPlayer2.firefox path=/org/mpris/MediaPlayer2
@ -46,8 +46,7 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
# Common extensions # Common extensions
/opt/net.downloadhelper.coapp/bin/net.downloadhelper.coapp* rPx, /opt/net.downloadhelper.coapp/bin/net.downloadhelper.coapp* rPx,
@{bin}/browserpass rPx, @{bin}/browserpass rPx,
# As a temporary solution - see issue #128 @{bin}/keepassxc-proxy rPx -> firefox//&keepassxc-proxy,
@{bin}/keepassxc-proxy rix,
owner @{user_config_dirs}/gtk-{3,4}.0/assets/*.svg r, owner @{user_config_dirs}/gtk-{3,4}.0/assets/*.svg r,
owner @{user_config_dirs}/ibus/bus/ r, owner @{user_config_dirs}/ibus/bus/ r,
@ -72,6 +71,8 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
owner @{tmp}/MozillaBackgroundTask-{@{hex15},@{hex16}}-removeDirectory/{**,} rw, owner @{tmp}/MozillaBackgroundTask-{@{hex15},@{hex16}}-removeDirectory/{**,} rw,
owner @{tmp}/Mozillato-be-removed-cachePurge-{@{hex15},@{hex16}} rwk, owner @{tmp}/Mozillato-be-removed-cachePurge-{@{hex15},@{hex16}} rwk,
owner @{run}/user/@{uid}/org.keepassxc.KeePassXC.BrowsrServer w,
# Silencer # Silencer
deny @{lib_dirs}/** w, deny @{lib_dirs}/** w,

6
apparmor.d/profiles-g-l/keepassxc-proxy
View file

@ -12,14 +12,14 @@ profile keepassxc-proxy @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/consoles>
signal (receive) set=(term, kill),
network inet dgram, network inet dgram,
network inet6 dgram, network inet6 dgram,
network inet stream, network inet stream,
network inet6 stream, network inet6 stream,
network netlink raw, network netlink raw,
signal receive set=(term, kill) peer=firefox,
@{exec_path} mr, @{exec_path} mr,
/usr/share/icons/*/index.theme r, /usr/share/icons/*/index.theme r,
@ -32,7 +32,7 @@ profile keepassxc-proxy @{exec_path} {
# file_inherit # file_inherit
deny owner @{run}/user/@{uid}/.[a-zA-Z]*/{,s} rw, deny owner @{run}/user/@{uid}/.[a-zA-Z]*/{,s} rw,
deny owner @{run}/user/@{uid}/kpxc_server rw, deny owner @{run}/user/@{uid}/kpxc_server rw,
deny /dev/shm/org.chromium.* rw, deny /dev/shm/org.chromium.@{rand6} rw,
deny owner /dev/shm/org.mozilla.ipc.@{int}.@{int} rw, deny owner /dev/shm/org.mozilla.ipc.@{int}.@{int} rw,
deny owner @{HOME}/.mozilla/** rw, deny owner @{HOME}/.mozilla/** rw,
deny owner @{user_cache_dirs}/mozilla/** rw, deny owner @{user_cache_dirs}/mozilla/** rw,