aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/plasmashell
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-04-14 22:32:43 +0200
commit83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch)
tree19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/apparmor/apparmor.d/plasmashell
parent51d43498b07dc97d795947964534f0903cd05db5 (diff)
downloadbin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz
bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/plasmashell')
-rw-r--r--straper/db/public/apparmor/apparmor.d/plasmashell47
1 files changed, 0 insertions, 47 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/plasmashell b/straper/db/public/apparmor/apparmor.d/plasmashell
deleted file mode 100644
index 43b47e8..0000000
--- a/straper/db/public/apparmor/apparmor.d/plasmashell
+++ /dev/null
@@ -1,47 +0,0 @@
-abi <abi/4.0>,
-
-include <tunables/global>
-
-profile plasmashell /usr/bin/plasmashell flags=(complain) {
- include <abstractions/dbus-session>
-
- capability,
- userns,
- network,
- dbus,
- mount,
- umount,
- remount,
- signal,
- mqueue,
- unix,
- ptrace,
-
- # allow executing QtWebEngineProcess with full permissions including userns (using profile stacking to avoid no_new_privs issues)
- /usr/lib/x86_64-linux-gnu/qt[56]/libexec/QtWebEngineProcess cx -> &plasmashell//QtWebEngineProcess,
- /usr/libexec/qt[56]/QtWebEngineProcess cx -> &plasmashell//QtWebEngineProcess,
-
- # allow to execute all other programs under their own profile, or to run unconfined
- /** pux,
-
- /{,**} mrwlk,
-
- profile QtWebEngineProcess flags=(complain) {
- capability,
- userns,
- network,
- dbus,
- mount,
- umount,
- remount,
- signal,
- mqueue,
- unix,
- ptrace,
- /** pux,
- /{,**} mrwlk,
- }
-
- # Site-specific additions and overrides. See local/README for details.
- include if exists <local/plasmashell>
-}