summaryrefslogtreecommitdiff
path: root/contrib/apparmor
diff options
context:
space:
mode:
authorJulien Morvan <julien.morvan@outlook.com>2015-08-31 16:42:10 +0000
committerJulien Morvan <julien.morvan@outlook.com>2015-08-31 16:42:10 +0000
commit8049927717b940abf3af8e697eb381871a3ca3d5 (patch)
tree05c16665e9608bf1cdcfb1dac52cc2eb0b1c7ba4 /contrib/apparmor
parent1ebec416b2d3f34d623f9fe8ce984179722dfee1 (diff)
libextractor
Diffstat (limited to 'contrib/apparmor')
-rw-r--r--contrib/apparmor/usr.bin.extract62
1 files changed, 0 insertions, 62 deletions
diff --git a/contrib/apparmor/usr.bin.extract b/contrib/apparmor/usr.bin.extract
deleted file mode 100644
index bdfde1f1e..000000000
--- a/contrib/apparmor/usr.bin.extract
+++ /dev/null
@@ -1,62 +0,0 @@
-# Last Modified: Wed Jul 15 15:26:31 2015
-#include <tunables/global>
-
-/usr/bin/extract {
- /dev/shm/LE-* rw,
-
- /etc/ld.so.cache mr,
-
- /usr/bin/extract mr,
-
- /usr/lib/gconv/gconv-modules r,
-
- /usr/lib/libFLAC.so.* mr,
- /usr/lib/libacl.so.* mr,
- /usr/lib/libarchive.so.* mr,
- /usr/lib/libattr.so.* mr,
- /usr/lib/libbz2.so.* mr,
- /usr/lib/libc-*.so mr,
- /usr/lib/libcrypto.so.* mr,
- /usr/lib/libdl-*.so mr,
- /usr/lib/libexiv2.so.* mr,
- /usr/lib/libexpat.so.* mr,
- /usr/lib/libextractor.so.* mr,
-
- /usr/lib/libextractor/ r,
- /usr/lib/libextractor/libextractor_*.so mr,
-
- /usr/lib/libextractor_common.so.* mr,
-
- /usr/lib/libgcc_s.so.* mr,
- /usr/lib/libjpeg.so.* mr,
- /usr/lib/libltdl.so.* mr,
- /usr/lib/liblzma.so.* mr,
- /usr/lib/liblzo2.so.* mr,
- /usr/lib/libm-*.so mr,
- /usr/lib/libmagic.so.* mr,
- /usr/lib/libmpeg2.so.* mr,
- /usr/lib/libogg.so.* mr,
- /usr/lib/libpthread-*.so mr,
- /usr/lib/librt-*.so mr,
- /usr/lib/libstdc++.so.* mr,
- /usr/lib/libtiff.so.* mr,
- /usr/lib/libvorbis.so.* mr,
- /usr/lib/libvorbisfile.so.* mr,
- /usr/lib/libz.so.* mr,
-
- /usr/lib/locale/locale-archive r,
-
- /usr/share/file/misc/magic.mgc r,
-
- /usr/share/locale/fr/LC_MESSAGES/libc.mo r,
- /usr/share/locale/fr/LC_MESSAGES/libextractor.mo r,
- /usr/share/locale/locale.alias r,
-
- deny @{HOME}/.* r,
- deny @{HOME}/.*/** r,
- #files where extract can be used
- owner @{HOME}/** r,
- /media/** r,
-
- @{PROC}/@{pid}/maps r,
-}