diff options
author | Martin Pitt <martin.pitt@ubuntu.com> | 2011-11-01 14:59:19 -0400 |
---|---|---|
committer | Martin Pitt <martin.pitt@ubuntu.com> | 2011-11-01 14:59:19 -0400 |
commit | 14443b7ef4daea79c264e738170c88270f1c902c (patch) | |
tree | 5d696b55a1f2b246726d9236bc6ec5779776ddab /data | |
parent | 1d688b99cccb000f2389860d288abee5ea78a61e (diff) | |
download | lightdm-14443b7ef4daea79c264e738170c88270f1c902c.tar.gz |
Limit /media access to guest owned devices
https://launchpad.net/bugs/882862
Diffstat (limited to 'data')
-rw-r--r-- | data/guest-session.apparmor | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/data/guest-session.apparmor b/data/guest-session.apparmor index e652d34a..cf90d5f1 100644 --- a/data/guest-session.apparmor +++ b/data/guest-session.apparmor @@ -28,8 +28,8 @@ LIBEXECDIR/lightdm-guest-session-wrapper { /lib32/** rmixk, /lib64/ r, /lib64/** rmixk, - /media/ r, - /media/** rmwlixk, # we want access to USB sticks and the like + owner /media/ r, + owner /media/** rmwlixk, # we want access to USB sticks and the like /opt/ r, /opt/** rmixk, @{PROC}/ r, |