torproject/torbrowser-launcher
1
0
Fork 0
mirror of https://github.com/torproject/torbrowser-launcher.git synced 2024-10-06 23:23:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update/Add Additional Abstractions for AppArmor

Browse Source
This commit is contained in:
Thomas Ward 2024-10-05 10:14:32 +00:00 committed by asciiwolf
parent 8761fed197
commit e049fdcc76
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
apparmor/torbrowser.Browser.firefox
View File

@ -11,6 +11,8 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
#include <abstractions/mesa>
#include <abstractions/opencl>
#include if exists <abstractions/vulkan>
#include if exists <abstractions/dbus-session>
#include if exists <abstractions/X>
deny capability sys_ptrace,
@ -26,6 +28,9 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
network netlink raw,
network tcp,
# ibus socket
owner @{HOME}/.cache/ibus/dbus-* rw,
ptrace (trace) peer=@{profile_name},
signal (receive, send) set=("term") peer=@{profile_name},