mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
e3c0425857
Acked-By: Jamie Strandboge <jamie@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>
19 lines
746 B
Text
19 lines
746 B
Text
# vim:syntax=apparmor
|
|
# privacy-violations-strict contains additional rules for sensitive
|
|
# files that you want to explicitly deny access
|
|
|
|
#include <abstractions/private-files>
|
|
|
|
# potentially extremely sensitive files
|
|
audit deny @{HOME}/.gnupg/** mrwkl,
|
|
audit deny @{HOME}/.ssh/** mrwkl,
|
|
audit deny @{HOME}/.gnome2_private/** mrwkl,
|
|
audit deny @{HOME}/.gnome2/keyrings/** mrwkl,
|
|
audit deny @{HOME}/.mozilla/** mrwkl,
|
|
audit deny @{HOME}/.config/chromium/** mrwkl,
|
|
audit deny @{HOME}/.{,mozilla-}thunderbird/** mrwkl,
|
|
audit deny @{HOME}/.evolution/** mrwkl,
|
|
audit deny @{HOME}/.config/evolution/** mrwkl,
|
|
audit deny @{HOME}/.kde{,4}/share/apps/kmail{,2}/** mrwkl,
|
|
audit deny @{HOME}/.kde{,4}/share/apps/kwallet/** mrwkl,
|
|
|