summaryrefslogtreecommitdiff
path: root/data
diff options
context:
space:
mode:
authorMartin Pitt <martin.pitt@ubuntu.com>2011-11-01 14:59:19 -0400
committerMartin Pitt <martin.pitt@ubuntu.com>2011-11-01 14:59:19 -0400
commit14443b7ef4daea79c264e738170c88270f1c902c (patch)
tree5d696b55a1f2b246726d9236bc6ec5779776ddab /data
parent1d688b99cccb000f2389860d288abee5ea78a61e (diff)
downloadlightdm-14443b7ef4daea79c264e738170c88270f1c902c.tar.gz
Limit /media access to guest owned devices
https://launchpad.net/bugs/882862
Diffstat (limited to 'data')
-rw-r--r--data/guest-session.apparmor4
1 files changed, 2 insertions, 2 deletions
diff --git a/data/guest-session.apparmor b/data/guest-session.apparmor
index e652d34a..cf90d5f1 100644
--- a/data/guest-session.apparmor
+++ b/data/guest-session.apparmor
@@ -28,8 +28,8 @@ LIBEXECDIR/lightdm-guest-session-wrapper {
/lib32/** rmixk,
/lib64/ r,
/lib64/** rmixk,
- /media/ r,
- /media/** rmwlixk, # we want access to USB sticks and the like
+ owner /media/ r,
+ owner /media/** rmwlixk, # we want access to USB sticks and the like
/opt/ r,
/opt/** rmixk,
@{PROC}/ r,