Sergio Costas 6fd84600e0 apparmor: allow to read /proc/self/map_files (#12547) ...

* apparmor: allow to read /proc/self/map_files

Accesing this folder is needed for mangohud. Since the info
there is basically the same than in /proc/self/maps, but it's
easier to access because the program doesn't have to parse it,
it should be safe.

* Add "owner" modifier

* Add comment explaining security details

Added a comment explaining why it is secure to allow to access
this folder.

* Fixed comment.

2023-03-28 12:38:41 +02:00

..

apparmor_test.go

many: move AA profile operations to sandbox/apparmor

2022-04-22 09:53:51 +03:00

apparmor.go

many: fix formatting w/ gofmt 1.19

2023-01-16 14:23:11 +01:00

backend_test.go

i/apparmor,s/apparmor: move snap-confine snippet generation to sandbox

2023-03-01 10:15:56 +01:00

backend.go

multiple: Add missing updating of snippets when changing the homedirs.

2023-03-08 12:11:00 +01:00

export_test.go

i/apparmor: move mocking of home and overlay conditions to osutil (#12270)

2022-11-07 12:26:15 +03:00

spec_test.go

interfaces/apparmor: review feedback

2022-05-16 09:01:57 +02:00

spec.go

many: fix formatting w/ gofmt 1.19

2023-01-16 14:23:11 +01:00

template_vars.go

add SNAP_INSTANCE_DESKTOP template var and use it

2020-08-14 20:44:24 +00:00

template.go

apparmor: allow to read /proc/self/map_files (#12547)

2023-03-28 12:38:41 +02:00