From 83f7fe4b8402bab171d110703a1b1115efbc9b28 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Tue, 14 Apr 2026 22:32:43 +0200 Subject: cleaned up many scrits and deleted some that were of no use; renamed a lot --- .../db/public/apparmor/apparmor.d/usr.bin.msmtp | 86 ---------------------- 1 file changed, 86 deletions(-) delete mode 100644 straper/db/public/apparmor/apparmor.d/usr.bin.msmtp (limited to 'straper/db/public/apparmor/apparmor.d/usr.bin.msmtp') diff --git a/straper/db/public/apparmor/apparmor.d/usr.bin.msmtp b/straper/db/public/apparmor/apparmor.d/usr.bin.msmtp deleted file mode 100644 index e47f209..0000000 --- a/straper/db/public/apparmor/apparmor.d/usr.bin.msmtp +++ /dev/null @@ -1,86 +0,0 @@ -# Author: Simon Deziel - -#include - -profile msmtp /usr/bin/msmtp flags=(attach_disconnected) { - #include - #include - #include - #include - #include - #include - #include - - /usr/bin/msmtp mr, - /etc/aliases r, - /etc/msmtprc r, - /etc/mailname r, - /etc/netrc r, - owner @{HOME}/.msmtp* r, - owner @{HOME}/.netrc r, - owner @{HOME}/.tls-crls r, - - owner @{HOME}/.msmtp*.log wk, - /var/log/msmtp wk, - - owner @{HOME}/**/*msmtprc r, - owner @{HOME}/.config/msmtp/* r, - owner @{HOME}/.cache/msmtp/* r, - owner @{HOME}/.cache/msmtp/*.log wk, - - @{PROC}/@{pid}/loginuid r, - /tmp/ rw, - owner /tmp/* rw, - - # kerberos related - /tmp/{,.}krb5cc_* rwk, - /etc/gss/mech.d/ r, - /etc/gss/mech.d/** r, - - # to type password interactively - /dev/tty rw, - owner /dev/pts/[0-9]* rw, - - dbus send - bus=session - path=/org/freedesktop/secrets - interface=org.freedesktop.Secret.Service, - dbus receive - bus=session - path=/org/freedesktop/secrets - interface=org.freedesktop.Secret.Service, - dbus send - bus=session - path=/org/freedesktop/secrets/prompt/* - interface=org.freedesktop.Secret.Prompt, - dbus receive - bus=session - path=/org/freedesktop/secrets/prompt/* - interface=org.freedesktop.Secret.Prompt, - dbus send - bus=session - path=/org/freedesktop/secrets - interface=org.freedesktop.DBus.Properties - member=GetAll, - - # secret helpers - /{,usr/}bin/bash Cx -> helpers, - /{,usr/}bin/dash Cx -> helpers, - profile helpers { - #include - /{,usr/}bin/bash mr, - /{,usr/}bin/dash mr, - /tmp/ rw, - owner /tmp/* rw, - - /usr/bin/secret-tool PUx, - /usr/bin/gpg{,2} PUx, - /usr/bin/pass PUx, - /usr/bin/head PUx, - /usr/bin/keyring PUx, - /{,usr/}bin/cat PUx, - /usr/bin/oauth2get PUx, - } - - #include -} -- cgit v1.3