Grimmauld/grimm-nixos-laptop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

osu part 2

Browse source
This commit is contained in:
Grimmauld 2024-10-14 16:54:09 +02:00
parent d718e5ac65
commit f781c73d8d
Signed by: Grimmauld
GPG key ID: C2946668769F91FB
1 changed files with 3 additions and 38 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

41
common/tooling/apparmor/default.nix
View file

@ -120,15 +120,10 @@ in
profile osu-lazer @{bin}/osu\! flags=(attach_disconnected) {
include <abstractions/base> # read access to /nix/store, basic presets for most apps
# include <abstractions/audio-client>
include <abstractions/common/bwrap>
# include <abstractions/ssl_certs>
include <abstractions/devices-usb>
# include <abstractions/vulkan-strict>
# include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/app/udevadm>
# include <abstractions/desktop>
include <abstractions/app/bus>
include <abstractions/common/game>
@ -173,54 +168,24 @@ in
owner @{HOME}/@{XDG_CONFIG_DIR}/mimeapps* rwk,
owner @{HOME}/@{XDG_DATA_DIR}/applications/discord-*.desktop rwk,
/ r,
/nix/store/*-etc-os-release rk,
/nix/store/*/share/zoneinfo/** rk,
owner /tmp/** rwk,
/usr/lib/ r,
/var/cache/ldconfig/ rw,
owner /var/cache/ldconfig/ rw,
owner /etc/ld.so* rw,
@{PROC}/@{pid}/stat rk,
@{PROC}/@{pid}/task/@{pid}/comm wr,
@{PROC}@{sys}/kernel/os{type,release} rk,
@{PROC}/version r,
@{PROC}/{sys,@{pid}}/net/** rk,
@{PROC}/@{pid}/maps rk,
owner @{PROC}/@{pid}/{maps,stat} rk,
@{PROC}/sys/kernel/os{type,release} rk,
/dev/snd/** rw,
/dev/input/ r,
/dev/dri/** wr,
/dev/input/** r,
/dev/udmabuf wr,
/dev/hidraw* rw,
/.host-etc/alsa/conf.d/{,**} r,
/.host-etc/ssl/certs/{,**} r,
/.host-etc/resolv.conf rk,
/run/udev/data/* r,
# @{sys}/devices/@{pci}device r,
# @{sys}/devices/@{pci}boot_vga r,
# @{sys}/devices/@{pci}subsystem_vendor r,
# @{sys}/devices/@{pci}subsystem_device r,
# @{sys}/devices/virtual/dmi/id/* r,
# @{sys}/devices/@{pci}uevent r,
# @{sys}/devices/virtual/sound/** r,
# @{sys}/devices/virtual/block/** r,
# @{sys}/block/ r,
# @{sys}/devices@{sys}tem/node/ r,
# @{sys}/fs/cgroup/{,**/} r,
# @{sys}/fs/cgroup/** r,
# @{sys}/devices/@{pci}sound/** r,
# @{sys}/devices/@{pci}vendor r,
# @{sys}/class/hidraw/ r,
# @{sys}/class/input/ r,
# @{sys}/class/input/{,**} r,
# @{sys}/devices/**/input/** r,
}
'';
};