mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(profile): improve linuxqq

Browse Source 
See #474
This commit is contained in:
Alexandre Pujol 2024-09-12 12:12:29 +01:00
parent e4a986096f
commit fb93ac0df3
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
1 changed files with 7 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
apparmor.d/profiles-g-l/linuxqq
View File

@ -11,16 +11,12 @@ include <tunables/global>
@{config_dirs} = @{user_config_dirs}/@{name}
@{cache_dirs} = @{user_cache_dirs}/@{name}
@{exec_path} = @{bin}/linuxqq
@{exec_path} += /opt/QQ/qq
@{exec_path} = @{bin}/linuxqq @{lib_dirs}/qq
profile linuxqq @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/common/electron>
include <abstractions/graphics>
include <abstractions/ssl_certs>
include <abstractions/fontconfig-cache-read>
include <abstractions/audio-client>
include <abstractions/common/electron>
include <abstractions/fontconfig-cache-read>
network netlink raw,
network netlink dgram,
@ -29,17 +25,13 @@ profile linuxqq @{exec_path} flags=(attach_disconnected) {
network inet6 dgram,
network inet6 stream,
@{exec_path} mr,
@{exec_path} mrix,
@{sh_path} r,
@{bin}/find rix,
@{bin}/rm rix,
@{bin}/xdg-open rix,
@{sh_path} r,
@{bin}/grep rix,
/opt/QQ/qq ix,
/opt/QQ/chrome_crashpad_handler ix,
@{lib_dirs}/chrome_crashpad_handler ix,
@{lib_dirs}/resources/app/{,**} m,
@{open_path} rPx -> child-open-strict,
/etc/machine-id r,
@ -48,7 +40,6 @@ profile linuxqq @{exec_path} flags=(attach_disconnected) {
owner @{PROC}/@{pid}/loginuid r,
owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/cmdline r,
/dev/tty rw,
/dev/pts/@{int} rw,