mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-29 13:28:19 +00:00
Code Issues Releases Wiki Activity

fusermount3: allow ro mounts on /cvmfs

Browse Source
This commit is contained in:
Valentin Volkl 2025-03-20 10:03:14 +00:00
parent 6076d8c49a
commit ce5e5a15fb
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
profiles/apparmor.d/fusermount3
View File

@ -21,6 +21,7 @@ profile fusermount3 /usr/bin/fusermount3 {
mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> @{run}/user/@{uid}/*/, mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> @{run}/user/@{uid}/*/,
mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> /media/**/, mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> /media/**/,
mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> /tmp/**/, mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> /tmp/**/,
mount fstype=@{fuse_types} options=(nosuid,nodev,ro) -> /cvmfs/**/,
umount @{HOME}/**/, umount @{HOME}/**/,
umount /mnt/{,**/}, umount /mnt/{,**/},