feat(profile): add structure for some cups profile.

They are empty, and forced into complain mode.
This commit is contained in:
Alexandre Pujol 2023-12-06 20:06:49 +00:00
parent c0bab81e45
commit 0568ef0d45
Failed to generate hash of commit
7 changed files with 108 additions and 0 deletions

View file

@ -0,0 +1,18 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/cups/backend/bluetooth
profile cups-backend-bluetooth @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/etc/papersize r,
include if exists <local/cups-backend-bluetooth>
}

View file

@ -0,0 +1,18 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/cups/backend/hp{,fax}
profile cups-backend-hp @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/etc/papersize r,
include if exists <local/cups-backend-hp>
}

View file

@ -0,0 +1,18 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/cups/backend/mdns
profile cups-backend-mdns @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/etc/papersize r,
include if exists <local/cups-backend-mdns>
}

View file

@ -0,0 +1,16 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/cups/notifier/dbus
profile cups-notifier-dbus @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
include if exists <local/cups-notifier-dbus>
}

View file

@ -0,0 +1,16 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/cups/notifier/mailto
profile cups-notifier-mailto @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
include if exists <local/cups-notifier-mailto>
}

View file

@ -0,0 +1,16 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/cups/notifier/rss
profile cups-notifier-rss @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
include if exists <local/cups-notifier-rss>
}

View file

@ -68,11 +68,14 @@ code complain
containerd-shim-runc-v2 attach_disconnected,complain
ctop complain
cups-backend-beh complain
cups-backend-bluetooth complain
cups-backend-brf complain
cups-backend-dnssd complain
cups-backend-hp complain
cups-backend-implicitclass complain
cups-backend-ipp complain
cups-backend-lpd complain
cups-backend-mdns complain
cups-backend-parallel complain
cups-backend-pdf complain
cups-backend-serial complain
@ -80,6 +83,9 @@ cups-backend-snmp complain
cups-backend-socket complain
cups-backend-usb complain
cups-browsed complain
cups-notifier-dbus complain
cups-notifier-mailto complain
cups-notifier-rss complain
cups-pk-helper-mechanism complain
cupsd attach_disconnected,complain
dbus-daemon attach_disconnected,complain