Git-Mirrors/onionshare
1
0
Fork 0
mirror of https://github.com/onionshare/onionshare.git synced 2024-12-30 09:46:15 -05:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'u451f-master'

Browse Source
This commit is contained in:
Micah Lee 2017-01-22 09:26:30 -08:00
commit eece9641a7
No known key found for this signature in database
GPG Key ID: 403C2657CD994F73
3 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
apparmor/abstractions/onionshare
View File

@ -1,5 +1,6 @@
#include <abstractions/base> #include <abstractions/base>
#include <abstractions/nameservice> #include <abstractions/nameservice>
#include <abstractions/private-files-strict>
#include <abstractions/python> #include <abstractions/python>
# Why are these not in abstractions/python? # Why are these not in abstractions/python?
@ -16,16 +17,13 @@
/sbin/ldconfig rix, /sbin/ldconfig rix,
/sbin/ldconfig.real rix, /sbin/ldconfig.real rix,
/bin/uname rix, /bin/uname rix,
/{,lib/live/mount/rootfs/filesystem.squashfs/}etc/mime.types r, /etc/mime.types r,
/{,lib/live/mount/rootfs/filesystem.squashfs/}usr/share/onionshare/ r, /usr/share/onionshare/ r,
/{,lib/live/mount/rootfs/filesystem.squashfs/}usr/share/onionshare/** r, /usr/share/onionshare/** r,
/tmp/ rw, /tmp/ rw,
/tmp/** rw, /tmp/** rw,
# Allow all user data except .gnupg, .ssh and other potential # Allow read on almost anything in @{HOME}. Lenient, but
# places for critically sensitive application data. # private-files-strict is in effect.
audit deny @{HOME}/.* mrwkl, owner @{HOME}/ r,
audit deny @{HOME}/.*/ mrwkl, owner @{HOME}/[^.]** r,
audit deny @{HOME}/.*/** mrwkl,
owner @{HOME}/ r,
owner @{HOME}/** r,

2
apparmor/usr.bin.onionshare
View File

@ -1,6 +1,6 @@
#include <tunables/global> #include <tunables/global>
/usr/bin/onionshare flags=(complain) { /usr/bin/onionshare {
#include <abstractions/onionshare> #include <abstractions/onionshare>
/usr/bin/ r, /usr/bin/ r,

8
apparmor/usr.bin.onionshare-gui
View File

@ -1,6 +1,6 @@
#include <tunables/global> #include <tunables/global>
/usr/bin/onionshare-gui flags=(complain) { /usr/bin/onionshare-gui {
#include <abstractions/gnome> #include <abstractions/gnome>
#include <abstractions/ibus> #include <abstractions/ibus>
#include <abstractions/onionshare> #include <abstractions/onionshare>
@ -8,14 +8,16 @@
/usr/bin/ r, /usr/bin/ r,
/usr/bin/onionshare-gui r, /usr/bin/onionshare-gui r,
/proc/*/cmdline r, /proc/*/cmdline r,
/usr/share/icons/Adwaita/index.theme r,
# The freedesktop.org abstraction doesn't allow `k`
/usr/share/icons/*/index.theme k,
# Why do these still emit audit journal entries? # Why do these still emit audit journal entries?
owner @{HOME}/.config/ibus/bus/ rw, owner @{HOME}/.config/ibus/bus/ rw,
owner @{HOME}/.config/ibus/bus/* rw, owner @{HOME}/.config/ibus/bus/* rw,
deny @{HOME}/.ICEauthority r, deny @{HOME}/.ICEauthority r,
deny /{,lib/live/mount/rootfs/filesystem.squashfs/}etc/machine-id r, deny /etc/machine-id r,
deny /var/lib/dbus/machine-id.* rw, deny /var/lib/dbus/machine-id.* rw,
# Accessibility support # Accessibility support