mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-29 21:38:15 +00:00
Code Issues Releases Wiki Activity

abstractions/private-files: disallow writes to thumbnailer dir (LP: #1788929)

Browse Source
This commit is contained in:
Jamie Strandboge 2018-09-27 11:53:52 -05:00 committed by John Johansen
parent 25aad109e1
commit fbb8486fe6
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
profiles/apparmor.d/abstractions/private-files
View File

@ -19,6 +19,7 @@
audit deny @{HOME}/.init/** wl, audit deny @{HOME}/.init/** wl,
audit deny @{HOME}/.kde{,4}/Autostart/** wl, audit deny @{HOME}/.kde{,4}/Autostart/** wl,
audit deny @{HOME}/.kde{,4}/env/** wl, audit deny @{HOME}/.kde{,4}/env/** wl,
audit deny @{HOME}/.local/share/thumbnailers/** wl,
audit deny @{HOME}/.pki/nssdb/*.so{,.[0-9]*} wl, audit deny @{HOME}/.pki/nssdb/*.so{,.[0-9]*} wl,
# don't allow reading/updating of run control files # don't allow reading/updating of run control files