mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-22 18:17:09 +00:00
Code Issues Releases Wiki Activity

firefox: fix app name and DBus access

Browse Source
This commit is contained in:
Daniel Richard G 2023-07-25 20:04:26 -04:00
parent 17a521ff50
commit 018efdeb9d
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
profiles/apparmor/profiles/extras/firefox
View File

@ -22,7 +22,7 @@ include <tunables/global>
# /usr/lib/firefox-4.0b8/firefox # /usr/lib/firefox-4.0b8/firefox
# but not: # but not:
# /usr/lib/firefox-4.0b8/firefox.sh # /usr/lib/firefox-4.0b8/firefox.sh
profile firefox @{MOZ_LIBDIR}/firefox{,*[^s][^h]} { profile firefox @{MOZ_LIBDIR}/@{MOZ_APP_NAME}{,*[^s][^h]} {
include <abstractions/audio> include <abstractions/audio>
include <abstractions/cups-client> include <abstractions/cups-client>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
@ -279,11 +279,17 @@ profile firefox @{MOZ_LIBDIR}/firefox{,*[^s][^h]} {
interface=org.gtk.vfs.Mount interface=org.gtk.vfs.Mount
member={CreateFileMonitor,Enumerate,QueryInfo} member={CreateFileMonitor,Enumerate,QueryInfo}
peer=(label=unconfined), peer=(label=unconfined),
dbus (receive)
bus=session
path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker
member=Mounted
peer=(label=unconfined),
dbus (send) dbus (send)
bus=session bus=session
path=/org/gtk/vfs/mounttracker path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker interface=org.gtk.vfs.MountTracker
member={ListMountableInfo,ListMounts2,LookupMount,Mounted} member={ListMountableInfo,ListMounts2,LookupMount}
peer=(label=unconfined), peer=(label=unconfined),
# Allow access to xdg-desktop-portal and xdg-document-portal (LP: #1974449) # Allow access to xdg-desktop-portal and xdg-document-portal (LP: #1974449)