mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-24 20:08:11 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

xdg-mime xdg-open xdg-settings xprop

Browse source
This commit is contained in:
Roman Beslik 2024-10-13 14:19:52 +03:00
parent ffeb68af3b
commit 0525e51cde
4 changed files with 22 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
apparmor.d/groups/freedesktop/xdg-mime
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/xdg-mime
profile xdg-mime @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/freedesktop.org>
@{exec_path} r,
@ -50,14 +51,22 @@ profile xdg-mime @{exec_path} flags=(attach_disconnected) {
@{bin}/vendor_perl/mimetype Px,
@{bin}/xprop Px,
owner @{user_config_dirs}/mimeapps.list{,.new} rw,
owner @{tmp}/wl-copy-buffer-@{rand6}/stdin r,
@{PROC}/version r,
/dev/tty rw,
profile bus flags=(complain) {
include <abstractions/base>
include <abstractions/app/bus>
include <abstractions/bus-session>
include <abstractions/consoles>
@{bin}/dbus-send mr,
include if exists <local/xdg-mime_bus>
}

8
apparmor.d/groups/freedesktop/xdg-open
View file

@ -20,6 +20,7 @@ profile xdg-open @{exec_path} flags=(attach_disconnected) {
@{bin}/basename ix,
@{bin}/cat ix,
@{bin}/cut ix,
@{bin}/env ix,
@{bin}/readlink ix,
@{bin}/realpath ix,
@{bin}/sed ix,
@ -35,10 +36,15 @@ profile xdg-open @{exec_path} flags=(attach_disconnected) {
@{bin}/xdg-mime Px,
@{open_path} Px -> child-open-any,
profile bus {
@{PROC}/version r,
profile bus flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/app/bus>
include <abstractions/bus-session>
include <abstractions/consoles>
@{bin}/dbus-send mr,
include if exists <local/xdg-open_bus>
}

5
apparmor.d/groups/freedesktop/xdg-settings
View file

@ -28,6 +28,7 @@ profile xdg-settings @{exec_path} {
@{bin}/realpath rix,
@{bin}/rm ix,
@{bin}/sed ix,
@{bin}/sleep ix,
@{bin}/sort ix,
@{bin}/touch ix,
@{bin}/tr ix,
@ -46,6 +47,7 @@ profile xdg-settings @{exec_path} {
@{bin}/xprop Px,
owner @{user_config_dirs}/xfce4/helpers.rc{,.@{rand6}} rw,
owner @{user_share_dirs}/applications/{,**} rw,
@{PROC}/version r,
@ -55,6 +57,9 @@ profile xdg-settings @{exec_path} {
include <abstractions/base>
include <abstractions/app/bus>
include <abstractions/bus-session>
include <abstractions/consoles>
@{bin}/dbus-send mr,
include if exists <local/xdg-settings_bus>
}

1
apparmor.d/groups/freedesktop/xprop
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/xprop
profile xprop @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/freedesktop.org>
include <abstractions/X-strict>