From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- .../abstractions/ubuntu-browsers.d/user-files | 31 ---------------------- 1 file changed, 31 deletions(-) delete mode 100644 straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/user-files (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/user-files') diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/user-files b/straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/user-files deleted file mode 100644 index fa73152..0000000 --- a/straper/db/public/apparmor/apparmor.d/abstractions/ubuntu-browsers.d/user-files +++ /dev/null @@ -1,31 +0,0 @@ -# vim:syntax=apparmor - - abi , - - # Allow read to all files user has DAC access to and write access to all - # files owned by the user in $HOME. - @{HOME}/ r, - @{HOME}/** r, - owner @{HOME}/** w, - - # Do not allow read and/or write to particularly sensitive/problematic files - include - audit deny @{HOME}/.ssh/{,**} mrwkl, - audit deny @{HOME}/.gnome2_private/{,**} mrwkl, - audit deny @{HOME}/.kde{,4}/{,share/,share/apps/} w, - audit deny @{HOME}/.kde{,4}/share/apps/kwallet/{,**} mrwkl, - audit deny @{HOME}/.local/share/kwalletd/{,**} mrwkl, - - # Comment this out if using gpg plugin/addons - audit deny @{HOME}/.gnupg/{,**} mrwkl, - - # Allow read to all files user has DAC access to and write for files the user - # owns on removable media and filesystems. - /media/** r, - /mnt/** r, - /srv/** r, - /net/** r, - owner /media/** w, - owner /mnt/** w, - owner /srv/** w, - owner /net/** w, -- cgit v1.3