2021-04-01 16:17:47 +01:00
|
|
|
# apparmor.d - Full set of apparmor profiles
|
|
|
|
|
# Copyright (C) 2018-2021 Mikhail Morfikov
|
|
|
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
2020-09-12 17:19:23 +02:00
|
|
|
|
2020-12-10 22:33:39 +01:00
|
|
|
abi <abi/3.0>,
|
2020-09-12 17:19:23 +02:00
|
|
|
|
|
|
|
|
owner @{HOME}/.cache/fontconfig/ rw,
|
|
|
|
|
owner @{HOME}/.cache/fontconfig/CACHEDIR.TAG{,.NEW,.LCK,.TMP-*} rw,
|
|
|
|
|
owner @{HOME}/.cache/fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rwk,
|
|
|
|
|
|
|
|
|
|
owner @{HOME}/.fontconfig/ rw,
|
|
|
|
|
owner @{HOME}/.fontconfig/CACHEDIR.TAG{,.NEW,.LCK,.TMP-*} rw,
|
|
|
|
|
owner @{HOME}/.fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rwk,
|
|
|
|
|
|
|
|
|
|
# This is to create .uuid file containing an UUID at a font directory. The UUID will be used to
|
|
|
|
|
# identify the font directory and is used to determine the cache filename if available.
|
|
|
|
|
owner /usr/local/share/fonts/.uuid{,.NEW,.LCK,.TMP-*} rw,
|
|
|
|
|
link /usr/local/share/fonts/.uuid.LCK -> /usr/local/share/fonts/.uuid.TMP-*,
|
|
|
|
|
/usr/share/**/.uuid{,.NEW,.LCK,.TMP-*} r,
|
|
|
|
|
deny /usr/share/**/.uuid{,.NEW,.LCK,.TMP-*} w,
|
2021-03-13 09:47:36 +01:00
|
|
|
|
|
|
|
|
# For Google Fonts downloaded via font-manager (###FIXME### when they fix resolving of vars)
|
|
|
|
|
owner "@{HOME}/.local/share/fonts/Google Fonts/.uuid{,.NEW,.LCK,.TMP-*}" rw,
|
|
|
|
|
link "@{HOME}/.local/share/fonts/Google Fonts/.uuid.LCK" -> "/home/*/.local/share/fonts/Google Fonts/.uuid.TMP-*",
|
|
|
|
|
owner "@{HOME}/.local/share/fonts/Google Fonts/**/.uuid{,.NEW,.LCK,.TMP-*}" rw,
|
|
|
|
|
link "@{HOME}/.local/share/fonts/Google Fonts/**/.uuid.LCK" -> "/home/*/.local/share/fonts/Google Fonts/**/.uuid.TMP-*",
|
|
|
|
|
|
