From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- .../apparmor.d/abstractions/private-files-strict | 30 ---------------------- 1 file changed, 30 deletions(-) delete mode 100644 straper/db/public/apparmor/apparmor.d/abstractions/private-files-strict (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/private-files-strict') diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/private-files-strict b/straper/db/public/apparmor/apparmor.d/abstractions/private-files-strict deleted file mode 100644 index 28d3ab1..0000000 --- a/straper/db/public/apparmor/apparmor.d/abstractions/private-files-strict +++ /dev/null @@ -1,30 +0,0 @@ -# vim:syntax=apparmor -# privacy-violations-strict contains additional rules for sensitive -# files that you want to explicitly deny access - - abi , - - include - - # potentially extremely sensitive files - audit deny @{HOME}/.aws/{,**} mrwkl, - audit deny @{HOME}/.gnupg/{,**} mrwkl, - audit deny @{HOME}/.ssh/{,**} mrwkl, - audit deny @{HOME}/.gnome2_private/{,**} mrwkl, - audit deny @{HOME}/.gnome2/ w, - audit deny @{HOME}/.gnome2/keyrings/{,**} mrwkl, - # don't allow access to any gnome-keyring modules - audit deny @{run}/user/[0-9]*/keyring** mrwkl, - audit deny @{HOME}/.mozilla/{,**} mrwkl, - audit deny @{HOME}/.config/ w, - audit deny @{HOME}/.config/chromium/{,**} mrwkl, - audit deny @{HOME}/.config/evolution/{,**} mrwkl, - audit deny @{HOME}/.evolution/{,**} mrwkl, - audit deny @{HOME}/.{,mozilla-}thunderbird/{,**} mrwkl, - audit deny @{HOME}/.kde{,4}/{,share/,share/apps/} w, - audit deny @{HOME}/.kde{,4}/share/apps/kmail{,2}/{,**} mrwkl, - audit deny @{HOME}/.kde{,4}/share/apps/kwallet/{,**} mrwkl, - audit deny @{HOME}/.local/share/kwalletd/{,**} mrwkl, - - # Include additions to the abstraction - include if exists -- cgit v1.3