From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- straper/db/public/apparmor/apparmor.d/plasmashell | 47 ----------------------- 1 file changed, 47 deletions(-) delete mode 100644 straper/db/public/apparmor/apparmor.d/plasmashell (limited to 'straper/db/public/apparmor/apparmor.d/plasmashell') diff --git a/straper/db/public/apparmor/apparmor.d/plasmashell b/straper/db/public/apparmor/apparmor.d/plasmashell deleted file mode 100644 index 43b47e8..0000000 --- a/straper/db/public/apparmor/apparmor.d/plasmashell +++ /dev/null @@ -1,47 +0,0 @@ -abi , - -include - -profile plasmashell /usr/bin/plasmashell flags=(complain) { - include - - capability, - userns, - network, - dbus, - mount, - umount, - remount, - signal, - mqueue, - unix, - ptrace, - - # allow executing QtWebEngineProcess with full permissions including userns (using profile stacking to avoid no_new_privs issues) - /usr/lib/x86_64-linux-gnu/qt[56]/libexec/QtWebEngineProcess cx -> &plasmashell//QtWebEngineProcess, - /usr/libexec/qt[56]/QtWebEngineProcess cx -> &plasmashell//QtWebEngineProcess, - - # allow to execute all other programs under their own profile, or to run unconfined - /** pux, - - /{,**} mrwlk, - - profile QtWebEngineProcess flags=(complain) { - capability, - userns, - network, - dbus, - mount, - umount, - remount, - signal, - mqueue, - unix, - ptrace, - /** pux, - /{,**} mrwlk, - } - - # Site-specific additions and overrides. See local/README for details. - include if exists -} -- cgit v1.3