diff --git a/debian/README.Debian b/debian/README.Debian index 9a85896a453dd8a3faf3560382ba994eea83cada..e9902a5bcf49ed507ee721cc45862fc0be34d85e 100644 --- a/debian/README.Debian +++ b/debian/README.Debian @@ -4,7 +4,7 @@ Included profiles - apt-cacher-ng: taken from the apparmor-profiles repository at revision 135. - Evince: taken from Ubuntu's evince 3.14.1-0ubuntu1. - GStreamer abstraction, gst_plugin_scanner named profile: taken from - the apparmor-profiles repository at revision 135. + the apparmor-profiles repository at revision 142. - Pidgin: taken from the apparmor-profiles repository at revision 142. - Totem: taken from the apparmor-profiles repository at revision 134, added on top changes submitted upstream: @@ -21,4 +21,4 @@ apparmor-profiles repository https://code.launchpad.net/~apparmor-dev/apparmor-profiles/master - -- last updated: Mo, 9 Mar 2015 13:58:31 +0100 + -- intrigeri <intrigeri@debian.org>, Wed, 12 Aug 2015 14:05:15 +0200 diff --git a/profiles/abstractions/gstreamer b/profiles/abstractions/gstreamer index 84df5aa98e0449c48895c90627834b294e1a7659..ef8c3efd9786302d29ba6d5d8d7fd15e7502c0a7 100644 --- a/profiles/abstractions/gstreamer +++ b/profiles/abstractions/gstreamer @@ -13,3 +13,5 @@ owner /tmp/orcexec.* mrw, owner /{,var/}run/user/[0-9]*/orcexec.* mrw, + # needed if /tmp is mounted noexec: + owner @{HOME}/orcexec.* mr,