mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 14:55:10 +00:00
Code Issues Releases Wiki Activity

Merge firefox: fix app name and DBus access

Browse Source 
Minor fixes for the firefox profile:

1. The attachment spec was failing to match `/usr/lib/firefox-esr/firefox-esr` on Debian;
2. The `Mounted` method of `org.gtk.vfs.MountTracker` is received, not sent.

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1076
Approved-by: John Johansen <john@jjmx.net>
Merged-by: John Johansen <john@jjmx.net>
This commit is contained in:
John Johansen
2023-07-31 02:39:44 +00:00
parent 17a521ff50 018efdeb9d
commit c2b8ca1b28
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
profiles/apparmor/profiles/extras/firefox
View File

@@ -22,7 +22,7 @@ include <tunables/global>
# /usr/lib/firefox-4.0b8/firefox # /usr/lib/firefox-4.0b8/firefox
# but not: # but not:
# /usr/lib/firefox-4.0b8/firefox.sh # /usr/lib/firefox-4.0b8/firefox.sh
profile firefox @{MOZ_LIBDIR}/firefox{,*[^s][^h]} { profile firefox @{MOZ_LIBDIR}/@{MOZ_APP_NAME}{,*[^s][^h]} {
include <abstractions/audio> include <abstractions/audio>
include <abstractions/cups-client> include <abstractions/cups-client>
include <abstractions/dbus-strict> include <abstractions/dbus-strict>
@@ -279,11 +279,17 @@ profile firefox @{MOZ_LIBDIR}/firefox{,*[^s][^h]} {
interface=org.gtk.vfs.Mount interface=org.gtk.vfs.Mount
member={CreateFileMonitor,Enumerate,QueryInfo} member={CreateFileMonitor,Enumerate,QueryInfo}
peer=(label=unconfined), peer=(label=unconfined),
dbus (receive)
bus=session
path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker
member=Mounted
peer=(label=unconfined),
dbus (send) dbus (send)
bus=session bus=session
path=/org/gtk/vfs/mounttracker path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker interface=org.gtk.vfs.MountTracker
member={ListMountableInfo,ListMounts2,LookupMount,Mounted} member={ListMountableInfo,ListMounts2,LookupMount}
peer=(label=unconfined), peer=(label=unconfined),
# Allow access to xdg-desktop-portal and xdg-document-portal (LP: #1974449) # Allow access to xdg-desktop-portal and xdg-document-portal (LP: #1974449)