mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 01:57:43 +00:00
Exclude hidden locations in home directories
Signed-off-by: Allen Huang <allen.huang@canonical.com>
This commit is contained in:
parent
ca8619313a
commit
0e28172ca6
@ -9,11 +9,11 @@ profile qpdf /usr/bin/qpdf {
|
||||
|
||||
# common file formats for qpdf are included: .pdf, .json and .qdf
|
||||
# user's home directories
|
||||
owner @{HOME}/**.[qQpP][dD][fF] rw,
|
||||
owner @{HOME}/**.[jJ][sS][oO][nN] rw,
|
||||
owner @{HOME}/[^.]**.[qQpP][dD][fF] rw,
|
||||
owner @{HOME}/[^.]**.[jJ][sS][oO][nN] rw,
|
||||
# allow less common .in and .out files within user's directories
|
||||
owner @{HOME}/**.[iI][nN] rw,
|
||||
owner @{HOME}/**.[oO][uU][tT] rw,
|
||||
owner @{HOME}/[^.]**.[iI][nN] rw,
|
||||
owner @{HOME}/[^.]**.[oO][uU][tT] rw,
|
||||
|
||||
# tmp directories
|
||||
owner /tmp/**.[qQpP][dD][fF] rw,
|
||||
|
Loading…
x
Reference in New Issue
Block a user