Merge pull request #479 from diabonas/apparmor-additions

AppArmor: silence some more unnecessary permissions
torproject · Aug 21, 2020 · 275a2b8 · 275a2b8
2 parents 0d2f14c + bdfe50b
commit 275a2b8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
@@ -124,6 +124,7 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
   deny /sys/devices/system/cpu/*/cache/index[0-9]*/size r,
   deny /run/user/[0-9]*/dconf/user rw,
   deny /usr/bin/lsb_release x,
+  deny capability sys_admin,
 
   # Silence denial logs about PulseAudio
   deny /etc/pulse/client.conf r,