diff options
| author | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukasz.kasprzak@pm.me> | 2026-04-14 22:32:43 +0200 |
| commit | 83f7fe4b8402bab171d110703a1b1115efbc9b28 (patch) | |
| tree | 19110702c7d740f6bd8ee4f5d2ebcb97442be237 /straper/db/public/apparmor/apparmor.d/plasmashell | |
| parent | 51d43498b07dc97d795947964534f0903cd05db5 (diff) | |
| download | bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.tar.gz bin-83f7fe4b8402bab171d110703a1b1115efbc9b28.zip | |
cleaned up many scrits and deleted some that were of no use; renamed a lot
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/plasmashell')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/plasmashell | 47 |
1 files changed, 0 insertions, 47 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/plasmashell b/straper/db/public/apparmor/apparmor.d/plasmashell deleted file mode 100644 index 43b47e8..0000000 --- a/straper/db/public/apparmor/apparmor.d/plasmashell +++ /dev/null @@ -1,47 +0,0 @@ -abi <abi/4.0>, - -include <tunables/global> - -profile plasmashell /usr/bin/plasmashell flags=(complain) { - include <abstractions/dbus-session> - - capability, - userns, - network, - dbus, - mount, - umount, - remount, - signal, - mqueue, - unix, - ptrace, - - # allow executing QtWebEngineProcess with full permissions including userns (using profile stacking to avoid no_new_privs issues) - /usr/lib/x86_64-linux-gnu/qt[56]/libexec/QtWebEngineProcess cx -> &plasmashell//QtWebEngineProcess, - /usr/libexec/qt[56]/QtWebEngineProcess cx -> &plasmashell//QtWebEngineProcess, - - # allow to execute all other programs under their own profile, or to run unconfined - /** pux, - - /{,**} mrwlk, - - profile QtWebEngineProcess flags=(complain) { - capability, - userns, - network, - dbus, - mount, - umount, - remount, - signal, - mqueue, - unix, - ptrace, - /** pux, - /{,**} mrwlk, - } - - # Site-specific additions and overrides. See local/README for details. - include if exists <local/plasmashell> -} |
