apparmor/profiles/apparmor.d/abstractions/ubuntu-browsers.d/plugins-common

# vim:syntax=apparmor

  #
  # Plugins/helpers
  #
  @{PROC}/@{pid}/fd/ r,
  /usr/lib/** rm,
  /{,usr/}bin/bash ixr,
  /{,usr/}bin/dash ixr,
  /{,usr/}bin/grep ixr,
  /{,usr/}bin/sed ixr,
  /usr/bin/m4 ixr,

  # Since all the ubuntu-browsers.d abstractions need this, just include it
  # here
  #include <abstractions/ubuntu-helpers>
update ubuntu abstractions to use '# vim:syntax=apparmor' 2010-12-21 12:53:33 -06:00			`# vim:syntax=apparmor`

add Ubuntu-specific profiles/apparmor.d/abstractions/ubuntu-browsers.d/* for use with browser profiles 2010-08-06 16:01:57 -05:00			`#`
			`# Plugins/helpers`
			`#`
Subject: profiles - use @{pid} tunable This patch adds the kernelvars tunable to the global set that is usually included by default in apparmor policies. It then converts the rules that are intended to match /proc/pid to use this tunable. Signed-off-by: Steve Beattie <sbeattie@ubuntu.com> Acked-By: Seth Arnold <seth.arnold@canonical.com> 2013-01-02 15:34:38 -08:00			`@{PROC}/@{pid}/fd/ r,`
add Ubuntu-specific profiles/apparmor.d/abstractions/ubuntu-browsers.d/* for use with browser profiles 2010-08-06 16:01:57 -05:00			`/usr/lib/** rm,`
Change /bin/ paths in profiles to also match on /usr/bin/ oftc_ftw reported on IRC that Arch Linux has a symlink /bin -> /usr/bin. This means we have to update paths for /bin/ in several profiles to also allow /usr/bin/ Acked-by: John Johansen <john.johansen@canonical.com> for trunk and 2.9 2015-10-20 23:12:35 +02:00			`/{,usr/}bin/bash ixr,`
			`/{,usr/}bin/dash ixr,`
			`/{,usr/}bin/grep ixr,`
			`/{,usr/}bin/sed ixr,`
add Ubuntu-specific profiles/apparmor.d/abstractions/ubuntu-browsers.d/* for use with browser profiles 2010-08-06 16:01:57 -05:00			`/usr/bin/m4 ixr,`
ubuntu-browsers.d/plugins-common: include the ubuntu-helpers profile here as it is needed by pretty much all of the browser abstractions. aa-update-browser unconditionally adds the plugins-common abstraction, so this should be sufficient. 2012-01-17 08:22:11 -06:00
			`# Since all the ubuntu-browsers.d abstractions need this, just include it`
			`# here`
			`#include <abstractions/ubuntu-helpers>`