[Pkg-privacy-commits] [torbrowser-launcher] 23/59: Silence the AppArmor logs a bit more.

[Roger Shimizu]

This is an automated email from the git hooks/post-receive script.

rosh pushed a commit to branch debian/sid
in repository torbrowser-launcher.

commit cf9f591fd8c4b5779730b722a7a0eb00b910b689
Author: anonym <anonym at riseup.net>
Date:   Fri Sep 22 17:27:12 2017 +0200

    Silence the AppArmor logs a bit more.
    
    Tor Browser will always check for these directories and fail,
    meanwhile needlessly spamming the journal with audit log entries.
---
 apparmor/torbrowser.Browser.firefox | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
index ff1bcdd..f4d766d 100644
--- a/apparmor/torbrowser.Browser.firefox
+++ b/apparmor/torbrowser.Browser.firefox
@@ -96,6 +96,10 @@
 
   # Silence denial logs about permissions we don't need
   deny /dev/dri/   rwklx,
+  deny @{HOME}/.cache/fontconfig/ rw,
+  deny @{HOME}/.cache/fontconfig/** rw,
+  deny @{HOME}/.config/gtk-2.0/ rw,
+  deny @{HOME}/.config/gtk-2.0/** rw,
   deny @{PROC}/@{pid}/net/route r,
   deny /sys/devices/system/cpu/cpufreq/policy[0-9]*/cpuinfo_max_freq r,
   deny /sys/devices/system/cpu/*/cache/index[0-9]*/size r,

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-privacy/packages/torbrowser-launcher.git