| Server IP : 85.143.209.190 / Your IP : 216.73.217.12 Web Server : Apache/2.4.63 (Ubuntu) System : Linux 49083.simplecloud.ru 5.4.0-205-generic #225-Ubuntu SMP Fri Jan 10 22:23:35 UTC 2025 x86_64 User : vozdvizhenka37 ( 1083) PHP Version : 7.4.33 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /snap/core/current/usr/share/apparmor/easyprof/policygroups/ubuntu-core/16.04/ |
Upload File : |
# Description: Can access the system as a display server. This is restricted # because it gives access to the graphics and input systems. # Usage: reserved # Currently this is mir-specific. When have an X or wayland server, update # accordingly. # This shouldn't be needed, but is harmless /usr/share/applications/ r, # This is arguably via capabilities assignment... # TODO: is this required? /dev/tty* rw, # This allows interacting with graphics hardware and therefore must be # reserved. capability sys_admin, /dev/dri/** rw, /sys/class/drm/ r, /sys/class/drm/** r, /sys/devices/**/drm/ r, /sys/devices/**/drm/** r, # This is arguably via capabilities assignment... # This allows snooping input events and therefore must be reserved. /dev/input/* rw, /sys/class/input/ r, /sys/class/input/** r, /sys/devices/**/input/ r, /sys/devices/**/input/** r, # Socket to talk on /run/mir_socket rw, # TODO: investigate. tvoss claims it shouldn't be needed # This allows access to all anonymous seqpacket addresses which breaks # application isolation (therefore only privileged apps may use this cap) unix (receive, send) type=seqpacket addr=none, # For non-opengl apps /dev/shm/\#* rw, # udev # FIXME: these are way too loose /sys/devices/**/ r, /run/udev/data/* r, /sys/devices/**/uevent rw, # FIXME: can this be fine-tuned at all? capability sys_ptrace, ptrace peer=**, # TODO: investigate (what is this chowning to?) capability chown, capability fowner, # TODO: investigate. These are usually the result of wrong directory # permissions capability dac_override, capability dac_read_search, # TODO: investigate capability sys_tty_config, # TODO: investigate network netlink raw,