[Pkg-privacy-commits] [torbrowser-launcher] 452/476: AppArmor: silence denied access to /sys/devices/virtual/block/*/uevent.

[Ximin Luo]

This is an automated email from the git hooks/post-receive script.

infinity0 pushed a commit to branch debian
in repository torbrowser-launcher.

commit 83f749f0d753f1aa70e011f72071a3dd465fb8cf
Author: intrigeri <intrigeri at boum.org>
Date:   Thu Jan 29 16:11:57 2015 +0000

    AppArmor: silence denied access to /sys/devices/virtual/block/*/uevent.
    
    I've not found any security-related usage of this kernel interface in the Tor
    Browser source tree, and the browser seems to work just fine without having
    access to it, so let's make AppArmor silently deny it.
    
    Note that this doesn't change any existing behaviour: only logging is affected.
---
 apparmor/torbrowser.Browser.firefox | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
index 0df7ad9..7e68a08 100644
--- a/apparmor/torbrowser.Browser.firefox
+++ b/apparmor/torbrowser.Browser.firefox
@@ -65,6 +65,7 @@
 
   /sys/devices/system/cpu/ r,
   /sys/devices/system/cpu/present r,
+  deny /sys/devices/virtual/block/*/uevent r,
 
   # Should use abstractions/gstreamer instead once merged upstream
   /etc/udev/udev.conf r,

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-privacy/packages/torbrowser-launcher.git