AppArmor: silence sys_admin capability

This permission is unsuccessfully requested during every start of Tor
Browser 9.5.3, silence it for cleaner logs.
This commit is contained in:
Jonas Witschel 2020-07-12 20:10:39 +02:00
parent 0d2f14c71a
commit bdfe50b998

View File

@ -124,6 +124,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
deny /sys/devices/system/cpu/*/cache/index[0-9]*/size r,
deny /run/user/[0-9]*/dconf/user rw,
deny /usr/bin/lsb_release x,
deny capability sys_admin,
# Silence denial logs about PulseAudio
deny /etc/pulse/client.conf r,