apparmor: minor improvements

Use @{PID} consistently.

Remove 'deny /proc/** w,' suggestion as it will break all
whitelisted entries.

1 files changed, 1 insertions, 4 deletions

diff --git a/etc/firejail-default b/etc/firejail-default
index 7735f2f80..1d3664b70 100644
--- a/etc/firejail-default
+++ b/etc/firejail-default
@@ -64,7 +64,7 @@ owner /{,var/}run/media/** w,
 /{,var/}run/cups/cups.sock w,
 
 # Needed for firefox sandbox
-/proc/[0-9]*/{uid_map,gid_map,setgroups} w,
+/proc/@{PID}/{uid_map,gid_map,setgroups} w,
 
 # Needed for electron apps
 /proc/@{PID}/comm w,
@@ -74,9 +74,6 @@ deny /proc/@{PID}/oom_adj w,
 deny /proc/@{PID}/oom_score_adj w,
 
 # Uncomment to silence all denied write warnings
-#deny /proc/** w,
-
-# Uncomment to silence all denied write warnings
 #deny /sys/** w,
 
 ##########