AppArmor: give read access to proc info about which command the brows…

…er's threads use
torproject · Sep 28, 2023 · b257da0 · b257da0
1 parent 41f2058
commit b257da0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/apparmor/torbrowser.Browser.firefox b/apparmor/torbrowser.Browser.firefox
@@ -51,6 +51,8 @@ profile torbrowser_firefox @{torbrowser_firefox_executable} {
   owner @{PROC}/@{pid}/stat r,
   owner @{PROC}/@{pid}/statm r,
   owner @{PROC}/@{pid}/status r,
+  owner @{PROC}/@{pid}/task/ r,
+  owner @{PROC}/@{pid}/task/*/comm r,
   owner @{PROC}/@{pid}/task/*/stat r,
   @{PROC}/sys/kernel/random/uuid r,