Commit c22e6fa5 authored by segfault's avatar segfault Committed by intrigeri
Browse files

Update OnionShare AppArmor profile (refs: #16914)

OnionShare fails to open the URL providing more information about
Stealth Onion Services. The added AppArmor rules allow executing
xdg-open and dependencies to fix this.

Edited by intrigeri:

 - Remove unnecessary permission to execute cut, head, awk, mawk, sed, tr, and
   xdg-mime.
 - Add missing permission to execute gio-launch-desktop.
parent 12f0e438
......@@ -10,6 +10,14 @@
/usr/bin/onionshare-gui r,
/proc/*/cmdline r,
# Required to open URLs in Tor Browser
/{usr/,}bin/{e,}grep rix,
/{usr/,}bin/gio rix,
/{usr/,}bin/which rix,
/usr/bin/xdg-open rmix,
/usr/lib/@{multiarch}/glib-[0-9]*/gio-launch-desktop ix,
/usr/local/bin/tor-browser rmUx,
# The freedesktop.org abstraction doesn't allow `k`
/usr/share/icons/*/index.theme k,
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment