This commit is contained in:
nobody43 2023-04-03 01:47:26 +00:00 committed by Alex
parent 2a20b69c65
commit fb92aa5716
2 changed files with 5 additions and 3 deletions

View file

@ -39,10 +39,9 @@ profile calibre @{exec_path} {
capability sys_ptrace, capability sys_ptrace,
network inet,
network inet6,
network netlink raw, network netlink raw,
# also denies network mounts
deny network inet,
deny network inet6,
unix (send, receive) type=stream peer=(addr=none, label=xorg), unix (send, receive) type=stream peer=(addr=none, label=xorg),
unix (bind, listen) type=stream addr="@*-calibre-gui.socket", unix (bind, listen) type=stream addr="@*-calibre-gui.socket",

View file

@ -5,6 +5,7 @@ acpid attach_disconnected,complain
agetty complain agetty complain
anacron complain anacron complain
atd complain atd complain
atril-previewer complain
auditctl complain auditctl complain
auditd attach_disconnected,complain auditd attach_disconnected,complain
augenrules complain augenrules complain
@ -54,6 +55,8 @@ downloadhelper complain
e2fsck complain e2fsck complain
etckeeper complain etckeeper complain
evince complain evince complain
evince-previewer complain
evince-thumbnailer complain
fail2ban-client attach_disconnected,complain fail2ban-client attach_disconnected,complain
fail2ban-server attach_disconnected,complain fail2ban-server attach_disconnected,complain
fdisk complain fdisk complain