mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-30 14:55:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Firefox: gvfsd and gnome support

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-02 10:10:08 +01:00
parent dc7a83886c
commit e57dd4e3a7
Failed to generate hash of commit
1 changed files with 14 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
apparmor.d/groups/browsers/firefox
View file

@ -1,5 +1,6 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2015-2020 Mikhail Morfikov
# 2021 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
@ -59,8 +60,8 @@ profile firefox @{exec_path} {
@{MOZ_LIBDIR}/*.so mr,
@{MOZ_LIBDIR}/crashreporter rPx,
@{MOZ_LIBDIR}/minidump-analyzer rPx,
#@{MOZ_LIBDIR}/pingsender rPx,
#@{MOZ_LIBDIR}/plugin-container rPx,
@{MOZ_LIBDIR}/pingsender rPx,
@{MOZ_LIBDIR}/plugin-container rPx,
/usr/share/firefox/{,**} r,
/etc/firefox/{,**} r,
@ -73,6 +74,9 @@ profile firefox @{exec_path} {
# To be able to read docs
/usr/share/doc/{,**} r,
#
/usr/{lib,libexec}/gvfsd-metadata rPx -> gvfsd-metadata,
# Firefox home files
owner @{MOZ_HOMEDIR}/ rw,
owner @{MOZ_HOMEDIR}/{extensions,systemextensionsdev}/ rw,
@ -186,6 +190,14 @@ profile firefox @{exec_path} {
# file_inherit
owner /dev/tty[0-9]* rw,
/etc/opensc.conf r,
owner @{HOME}/ r,
@{sys}/cgroup/cpu,cpuacct/user.slice/cpu.cfs_quota_us r,
@{sys}/fs/cgroup/cpu,cpuacct/cpu.cfs_quota_us r,
@{user_share_dirs}/gvfs-metadata/home r,
@{user_share_dirs}/gvfs-metadata/home-*.log r,
include <abstractions/dconf>
owner @{run}/user/[0-9]*/dconf/ rw,