mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-18 00:48:10 +01:00
feat(profile): add structure for some cups profile.
They are empty, and forced into complain mode.
This commit is contained in:
parent
c0bab81e45
commit
0568ef0d45
7 changed files with 108 additions and 0 deletions
18
apparmor.d/profiles-a-f/cups-backend-bluetooth
Normal file
18
apparmor.d/profiles-a-f/cups-backend-bluetooth
Normal file
|
@ -0,0 +1,18 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
|
||||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{lib}/cups/backend/bluetooth
|
||||
profile cups-backend-bluetooth @{exec_path} {
|
||||
include <abstractions/base>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
/etc/papersize r,
|
||||
|
||||
include if exists <local/cups-backend-bluetooth>
|
||||
}
|
18
apparmor.d/profiles-a-f/cups-backend-hp
Normal file
18
apparmor.d/profiles-a-f/cups-backend-hp
Normal file
|
@ -0,0 +1,18 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
|
||||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{lib}/cups/backend/hp{,fax}
|
||||
profile cups-backend-hp @{exec_path} {
|
||||
include <abstractions/base>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
/etc/papersize r,
|
||||
|
||||
include if exists <local/cups-backend-hp>
|
||||
}
|
18
apparmor.d/profiles-a-f/cups-backend-mdns
Normal file
18
apparmor.d/profiles-a-f/cups-backend-mdns
Normal file
|
@ -0,0 +1,18 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
|
||||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{lib}/cups/backend/mdns
|
||||
profile cups-backend-mdns @{exec_path} {
|
||||
include <abstractions/base>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
/etc/papersize r,
|
||||
|
||||
include if exists <local/cups-backend-mdns>
|
||||
}
|
16
apparmor.d/profiles-a-f/cups-notifier-dbus
Normal file
16
apparmor.d/profiles-a-f/cups-notifier-dbus
Normal file
|
@ -0,0 +1,16 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
|
||||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{lib}/cups/notifier/dbus
|
||||
profile cups-notifier-dbus @{exec_path} {
|
||||
include <abstractions/base>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
include if exists <local/cups-notifier-dbus>
|
||||
}
|
16
apparmor.d/profiles-a-f/cups-notifier-mailto
Normal file
16
apparmor.d/profiles-a-f/cups-notifier-mailto
Normal file
|
@ -0,0 +1,16 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
|
||||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{lib}/cups/notifier/mailto
|
||||
profile cups-notifier-mailto @{exec_path} {
|
||||
include <abstractions/base>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
include if exists <local/cups-notifier-mailto>
|
||||
}
|
16
apparmor.d/profiles-a-f/cups-notifier-rss
Normal file
16
apparmor.d/profiles-a-f/cups-notifier-rss
Normal file
|
@ -0,0 +1,16 @@
|
|||
# apparmor.d - Full set of apparmor profiles
|
||||
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
abi <abi/3.0>,
|
||||
|
||||
include <tunables/global>
|
||||
|
||||
@{exec_path} = @{lib}/cups/notifier/rss
|
||||
profile cups-notifier-rss @{exec_path} {
|
||||
include <abstractions/base>
|
||||
|
||||
@{exec_path} mr,
|
||||
|
||||
include if exists <local/cups-notifier-rss>
|
||||
}
|
|
@ -68,11 +68,14 @@ code complain
|
|||
containerd-shim-runc-v2 attach_disconnected,complain
|
||||
ctop complain
|
||||
cups-backend-beh complain
|
||||
cups-backend-bluetooth complain
|
||||
cups-backend-brf complain
|
||||
cups-backend-dnssd complain
|
||||
cups-backend-hp complain
|
||||
cups-backend-implicitclass complain
|
||||
cups-backend-ipp complain
|
||||
cups-backend-lpd complain
|
||||
cups-backend-mdns complain
|
||||
cups-backend-parallel complain
|
||||
cups-backend-pdf complain
|
||||
cups-backend-serial complain
|
||||
|
@ -80,6 +83,9 @@ cups-backend-snmp complain
|
|||
cups-backend-socket complain
|
||||
cups-backend-usb complain
|
||||
cups-browsed complain
|
||||
cups-notifier-dbus complain
|
||||
cups-notifier-mailto complain
|
||||
cups-notifier-rss complain
|
||||
cups-pk-helper-mechanism complain
|
||||
cupsd attach_disconnected,complain
|
||||
dbus-daemon attach_disconnected,complain
|
||||
|
|
Loading…
Reference in a new issue