[apparmor] Some new profiles
artiom
artiom14 at yandex.ru
Tue Jun 27 20:16:55 UTC 2017
geeqie image viewer and linuxdcpp.
P.S.:
IDK, maybe some of them aren't new.
-------------- next part --------------
# Last Modified: Mon Mar 18 23:57:28 2013
#include <tunables/global>
/usr/bin/linuxdcpp flags=(complain) {
#include <abstractions/base>
#include <abstractions/fonts>
#include <abstractions/nameservice>
/usr/bin/linuxdcpp mr,
/etc/passwd r,
#ABSTR.
owner @{HOME}/.Xauthority r,
#+ /home/*/.config/gtk-2.0/gtkfilechooser.ini r,
#+ /home/*/.config/user-dirs.dirs r,
owner "@{HOME}/.dc++/" rwk,
owner "@{HOME}/.dc++/**" rwlmk,
#+ /usr/share/icons/oxy-black/cursors/wait r,
/usr/share/linuxdcpp/ rk,
/usr/share/linuxdcpp/** rmk,
}
-------------- next part --------------
# vim:syntax=apparmor
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2006 Novell/SUSE
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
#include <tunables/global>
/etc/cron.daily/logrotate {
#include <abstractions/base>
#include <abstractions/bash>
#include <abstractions/nameservice>
/{usr/,}bin/bash mixr,
/{usr/,}bin/cat mixr,
/{usr/,}bin/gzip mixr,
/{usr/,}bin/kill mixr,
/{usr/,}bin/logger mixr,
/{usr/,}bin/true mixr,
/etc/init.d/* mixr,
/usr/bin/killall mixr,
/usr/sbin/logrotate mixr,
/var/log r,
/var/log/** wrl,
/var/lib/privoxy/log/** rwl,
/var/lib64/privoxy/log/** rwl,
/ r,
/dev/tty wr,
/etc/cron.daily/logrotate r,
/etc/logrotate.conf r,
/etc/logrotate.d r,
/etc/logrotate.d/* r,
/etc/subdomain.d r,
@{PROC} r,
@{PROC}/@{pid} r,
/tmp w,
/tmp/file* wl,
/tmp/logrot* wlr,
/var/lib/logrotate.status wr,
/{run,var}/lock/samba r,
/{,var/}run/httpd.pid r,
/{,var/}run/syslogd.pid r,
/var/spool/slrnpull wr,
/var/spool/slrnpull/log* wrl,
}
-------------- next part --------------
# Last Modified: Mon May 21 13:58:10 2012
#include <tunables/global>
/usr/bin/geeqie flags=(complain) {
#include <abstractions/base>
deny /etc/passwd r,
/etc/nsswitch.conf r,
/home/*/.Xauthority r,
/home/*/.config/geeqie/* rw,
/home/*/.icons/** r,
/home/*/.kde/share/config/gtkrc-2.0 r,
/usr/bin/geeqie-standard mr,
/usr/share/icons/** r,
/usr/share/themes/** r,
}
More information about the AppArmor
mailing list