mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-31 07:17:22 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): finalize the update kde profiles to plasma 6.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-11 22:43:37 +00:00
parent 042e9ff543
commit 0a9021bcf1
Failed to generate hash of commit
19 changed files with 40 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/akonadi/akonadi_maildispatcher_agent
View file

@ -30,7 +30,7 @@ profile akonadi_maildispatcher_agent @{exec_path} {
/usr/share/akonadi/plugins/{,**} r, /usr/share/akonadi/plugins/{,**} r,
/usr/share/hwdata/*.ids r, /usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r, /usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/akonadi_maildispatcher_agent.notifyrc r, /usr/share/knotifications{5,6}/akonadi_maildispatcher_agent.notifyrc r,
/etc/xdg/kdeglobals r, /etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r, /etc/xdg/kwinrc r,

2
apparmor.d/groups/akonadi/akonadi_newmailnotifier_agent
View file

@ -21,7 +21,7 @@ profile akonadi_newmailnotifier_agent @{exec_path} {
/usr/share/akonadi/plugins/serializer/{,*.desktop} r, /usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r, /usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r, /usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/akonadi_newmailnotifier_agent.notifyrc r, /usr/share/knotifications{5,6}/akonadi_newmailnotifier_agent.notifyrc r,
/etc/machine-id r, /etc/machine-id r,
/etc/xdg/kdeglobals r, /etc/xdg/kdeglobals r,

4
apparmor.d/groups/browsers/firefox-kmozillahelper
View file

@ -27,8 +27,8 @@ profile firefox-kmozillahelper @{exec_path} {
/usr/share/hwdata/*.ids r, /usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r, /usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications5/*.notifyrc r, /usr/share/knotifications{5,6}/*.notifyrc r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/usr/share/sounds/{,**} r, /usr/share/sounds/{,**} r,
/etc/pulse/client.conf r, /etc/pulse/client.conf r,

4
apparmor.d/groups/kde/dolphin
View file

@ -38,7 +38,7 @@ profile dolphin @{exec_path} {
/usr/share/kf5/kmoretools/{,**} r, /usr/share/kf5/kmoretools/{,**} r,
/usr/share/kio/{,**} r, /usr/share/kio/{,**} r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/usr/share/kservicetypes5/{,**} r, /usr/share/kservicetypes5/{,**} r,
/etc/fstab r, /etc/fstab r,
@ -68,7 +68,7 @@ profile dolphin @{exec_path} {
owner @{user_share_dirs}/recently-used.xbel.@{rand6} lk -> @{user_share_dirs}/#@{int}, owner @{user_share_dirs}/recently-used.xbel.@{rand6} lk -> @{user_share_dirs}/#@{int},
owner @{user_config_dirs}/#@{int} rw, owner @{user_config_dirs}/#@{int} rw,
owner @{user_config_dirs}/dolphinrc rw, owner @{user_config_dirs}/dolphinrc rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/dolphinrc.@{rand6} rwl -> @{user_config_dirs}/#@{int}, owner @{user_config_dirs}/dolphinrc.@{rand6} rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/dolphinrc.lock rwk, owner @{user_config_dirs}/dolphinrc.lock rwk,
owner @{user_config_dirs}/kde.org/#@{int} rw, owner @{user_config_dirs}/kde.org/#@{int} rw,

2
apparmor.d/groups/kde/drkonqi
View file

@ -22,7 +22,7 @@ profile drkonqi @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/usr/share/drkonqi/{,**} r, /usr/share/drkonqi/{,**} r,
/usr/share/knotifications5/*.notifyrc r, /usr/share/knotifications{5,6}/*.notifyrc r,
owner @{user_cache_dirs}/kcrash-metadata/* w, owner @{user_cache_dirs}/kcrash-metadata/* w,

2
apparmor.d/groups/kde/drkonqi-coredump-processor
View file

@ -12,6 +12,8 @@ profile drkonqi-coredump-processor @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/machine-id r,
/{run,var}/log/journal/ r, /{run,var}/log/journal/ r,
/{run,var}/log/journal/@{md5}/ r, /{run,var}/log/journal/@{md5}/ r,
/{run,var}/log/journal/@{md5}/user-@{uid}.journal r, /{run,var}/log/journal/@{md5}/user-@{uid}.journal r,

4
apparmor.d/groups/kde/kactivitymanagerd
View file

@ -19,7 +19,7 @@ profile kactivitymanagerd @{exec_path} {
/etc/xdg/menus/{,*/} r, /etc/xdg/menus/{,*/} r,
/usr/share/kf{5,6}/kactivitymanagerd/{,**} r, /usr/share/kf{5,6}/kactivitymanagerd/{,**} r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/etc/machine-id r, /etc/machine-id r,
@ -34,7 +34,7 @@ profile kactivitymanagerd @{exec_path} {
owner @{user_config_dirs}/menus/{,**} r, owner @{user_config_dirs}/menus/{,**} r,
owner @{user_share_dirs}/kactivitymanagerd/{,**} rwlk, owner @{user_share_dirs}/kactivitymanagerd/{,**} rwlk,
owner @{user_share_dirs}/kservices5/{,**} r, owner @{user_share_dirs}/kservices{5,6}/{,**} r,
owner @{user_share_dirs}/recently-used.xbel r, owner @{user_share_dirs}/recently-used.xbel r,
@{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/core_pattern r,

2
apparmor.d/groups/kde/kalendarac
View file

@ -19,7 +19,7 @@ profile kalendarac @{exec_path} {
/usr/share/akonadi/firstrun/{,*} r, /usr/share/akonadi/firstrun/{,*} r,
/usr/share/akonadi/plugins/serializer/{,*.desktop} r, /usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/knotifications5/{,**} r, /usr/share/knotifications{5,6}/{,**} r,
/usr/share/sounds/{,**} r, /usr/share/sounds/{,**} r,
/etc/machine-id r, /etc/machine-id r,

5
apparmor.d/groups/kde/kded
View file

@ -62,6 +62,7 @@ profile kded @{exec_path} {
@{bin}/kcminit rPx, @{bin}/kcminit rPx,
@{bin}/pgrep rCx -> pgrep, @{bin}/pgrep rCx -> pgrep,
@{bin}/plasma-welcome rPUx,
@{bin}/python3.@{int} rix, @{bin}/python3.@{int} rix,
@{bin}/setxkbmap rix, @{bin}/setxkbmap rix,
@{bin}/xrdb rPx, @{bin}/xrdb rPx,
@ -76,7 +77,7 @@ profile kded @{exec_path} {
/usr/share/kf{5,6}/kcookiejar/* r, /usr/share/kf{5,6}/kcookiejar/* r,
/usr/share/khotkeys/{,**} r, /usr/share/khotkeys/{,**} r,
/usr/share/knotifications{5,6}/{,**} r, /usr/share/knotifications{5,6}/{,**} r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/usr/share/kservicetypes5/{,**} r, /usr/share/kservicetypes5/{,**} r,
/etc/fstab r, /etc/fstab r,
@ -133,7 +134,7 @@ profile kded @{exec_path} {
owner @{user_share_dirs}/kcookiejar/cookies.lock rwk, owner @{user_share_dirs}/kcookiejar/cookies.lock rwk,
owner @{user_share_dirs}/kded{5,6}/{,**} rw, owner @{user_share_dirs}/kded{5,6}/{,**} rw,
owner @{user_share_dirs}/kscreen/{,**} rwl, owner @{user_share_dirs}/kscreen/{,**} rwl,
owner @{user_share_dirs}/kservices5/{,**} r, owner @{user_share_dirs}/kservices{5,6}/{,**} r,
owner @{user_share_dirs}/ktp/cache.db rwk, owner @{user_share_dirs}/ktp/cache.db rwk,
owner @{user_share_dirs}/remoteview/ r, owner @{user_share_dirs}/remoteview/ r,
owner @{user_share_dirs}/services5/{,**} r, owner @{user_share_dirs}/services5/{,**} r,

5
apparmor.d/groups/kde/ksmserver
View file

@ -58,9 +58,10 @@ profile ksmserver @{exec_path} flags=(attach_disconnected,mediate_deleted) {
owner @{user_config_dirs}/ksmserverrc.@{rand6} rwl, owner @{user_config_dirs}/ksmserverrc.@{rand6} rwl,
owner @{user_config_dirs}/ksmserverrc.lock rwk, owner @{user_config_dirs}/ksmserverrc.lock rwk,
owner @{user_config_dirs}/menus/ r, owner @{user_config_dirs}/menus/ r,
# owner @{user_config_dirs}/session/*_[0-9]*_[0-9]*_[0-9]* rw,
owner @{user_share_dirs}/kservices5/ r, owner @{user_share_dirs}/kservices{5,6}/ r,
owner @{user_share_dirs}/kservices5/ServiceMenus/ r, owner @{user_share_dirs}/kservices{5,6}/ServiceMenus/ r,
owner /tmp/@{rand6} rw, owner /tmp/@{rand6} rw,

4
apparmor.d/groups/kde/kstart
View file

@ -25,8 +25,8 @@ profile kstart @{exec_path} flags=(attach_disconnected) {
/var/lib/flatpak/exports/share/mime/ r, /var/lib/flatpak/exports/share/mime/ r,
owner @{user_cache_dirs}/mesa_shader_cache/index rw, owner @{user_cache_dirs}/mesa_shader_cache/index rw,
owner @{user_share_dirs}/kservices5/ r, owner @{user_share_dirs}/kservices{5,6}/ r,
owner @{user_share_dirs}/kservices5/ServiceMenus/ r, owner @{user_share_dirs}/kservices{5,6}/ServiceMenus/ r,
@{PROC}/sys/dev/i915/perf_stream_paranoid r, @{PROC}/sys/dev/i915/perf_stream_paranoid r,

2
apparmor.d/groups/kde/kwin_wayland
View file

@ -37,7 +37,7 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
/usr/share/desktop-directories/*.directory r, /usr/share/desktop-directories/*.directory r,
/usr/share/kglobalaccel/{,**} r, /usr/share/kglobalaccel/{,**} r,
/usr/share/knotifications{5,6}/ksmserver.notifyrc r, /usr/share/knotifications{5,6}/ksmserver.notifyrc r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/usr/share/kservicetypes5/{,*.desktop} r, /usr/share/kservicetypes5/{,*.desktop} r,
/usr/share/kwin/{,**} r, /usr/share/kwin/{,**} r,
/usr/share/libinput/{,**} r, /usr/share/libinput/{,**} r,

6
apparmor.d/groups/kde/plasma-browser-integration-host
View file

@ -23,7 +23,7 @@ profile plasma-browser-integration-host @{exec_path} {
/etc/xdg/menus/applications-merged/ r, /etc/xdg/menus/applications-merged/ r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/etc/xdg/menus/ r, /etc/xdg/menus/ r,
/etc/xdg/taskmanagerrulesrc r, /etc/xdg/taskmanagerrulesrc r,
@ -35,8 +35,8 @@ profile plasma-browser-integration-host @{exec_path} {
owner @{user_config_dirs}/menus/ r, owner @{user_config_dirs}/menus/ r,
owner @{user_share_dirs}/kservices5/ r, owner @{user_share_dirs}/kservices{5,6}/ r,
owner @{user_share_dirs}/kservices5/ServiceMenus/ r, owner @{user_share_dirs}/kservices{5,6}/ServiceMenus/ r,
@{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/core_pattern r,
owner @{PROC}/@{pid}/cmdline r, owner @{PROC}/@{pid}/cmdline r,

8
apparmor.d/groups/kde/plasma-discover
View file

@ -41,9 +41,9 @@ profile plasma-discover @{exec_path} {
@{lib}/kf5/kioslave5 rPx, @{lib}/kf5/kioslave5 rPx,
@{lib}/kf6/kioworker rPx, @{lib}/kf6/kioworker rPx,
/usr/share/knotifications5/plasma_workspace.notifyrc r, /usr/share/knotifications{5,6}/plasma_workspace.notifyrc r,
/usr/share/knsrcfiles/{,*} r, /usr/share/knsrcfiles/{,*} r,
/usr/share/kservices5/{,*} r, /usr/share/kservices{5,6}/{,*} r,
/usr/share/kservicetypes5/{,*} r, /usr/share/kservicetypes5/{,*} r,
/usr/share/libdiscover/** r, /usr/share/libdiscover/** r,
/usr/share/qt/translations/*.qm r, /usr/share/qt/translations/*.qm r,
@ -63,9 +63,11 @@ profile plasma-discover @{exec_path} {
/var/lib/flatpak/repo/{,**} r, /var/lib/flatpak/repo/{,**} r,
/var/lib/flatpak/appstream/{,**} r, /var/lib/flatpak/appstream/{,**} r,
/var/log/pacman.log r,
owner @{user_cache_dirs}/appstream/ r, owner @{user_cache_dirs}/appstream/ r,
owner @{user_cache_dirs}/appstream/*.xb rw, owner @{user_cache_dirs}/appstream/*.xb rw,
owner @{user_cache_dirs}/discover/{,**} rwl, owner @{user_cache_dirs}/discover/{,**} rwlk,
owner @{user_cache_dirs}/flatpak/system-cache/{,**} rw, owner @{user_cache_dirs}/flatpak/system-cache/{,**} rw,
owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/kio_http/ w, owner @{user_cache_dirs}/kio_http/ w,

4
apparmor.d/groups/kde/plasma_session
View file

@ -31,8 +31,8 @@ profile plasma_session @{exec_path} {
@{lib}/pam_kwallet_init rPx, @{lib}/pam_kwallet_init rPx,
@{lib}/polkit-kde-authentication-agent-@{int} rPx, @{lib}/polkit-kde-authentication-agent-@{int} rPx,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/usr/share/knotifications5/{,**} r, /usr/share/knotifications{5,6}/{,**} r,
/etc/xdg/autostart/ r, /etc/xdg/autostart/ r,
/etc/xdg/autostart/*.desktop r, /etc/xdg/autostart/*.desktop r,

4
apparmor.d/groups/kde/plasmashell
View file

@ -66,7 +66,7 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) {
/usr/share/konsole/ r, /usr/share/konsole/ r,
/usr/share/krunner/{,**} r, /usr/share/krunner/{,**} r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/usr/share/kservicetypes5/{,**} r, /usr/share/kservicetypes5/{,**} r,
/usr/share/lshw/artwork/logo.svg r, /usr/share/lshw/artwork/logo.svg r,
/usr/share/metainfo/{,**} r, /usr/share/metainfo/{,**} r,
@ -153,7 +153,7 @@ profile plasmashell @{exec_path} flags=(mediate_deleted) {
owner @{user_share_dirs}/krunnerstaterc rwl, owner @{user_share_dirs}/krunnerstaterc rwl,
owner @{user_share_dirs}/krunnerstaterc.@{rand6} rwl, owner @{user_share_dirs}/krunnerstaterc.@{rand6} rwl,
owner @{user_share_dirs}/krunnerstaterc.lock rwk, owner @{user_share_dirs}/krunnerstaterc.lock rwk,
owner @{user_share_dirs}/kservices5/{,**} r, owner @{user_share_dirs}/kservices{5,6}/{,**} r,
owner @{user_share_dirs}/ktp/cache.db rwk, owner @{user_share_dirs}/ktp/cache.db rwk,
owner @{user_share_dirs}/plasma_icons/*.desktop r, owner @{user_share_dirs}/plasma_icons/*.desktop r,
owner @{user_share_dirs}/plasma/plasmoids/{,**} r, owner @{user_share_dirs}/plasma/plasmoids/{,**} r,

2
apparmor.d/groups/kde/sddm
View file

@ -81,7 +81,7 @@ profile sddm @{exec_path} flags=(attach_disconnected,mediate_deleted) {
@{bin}/xmodmap rix, @{bin}/xmodmap rix,
@{bin}/unix_chkpwd rPx, @{bin}/unix_chkpwd rPx,
@{bin}/dbus-run-session rPx, @{bin}/dbus-run-session rix,
@{bin}/kwin_wayland rPx, @{bin}/kwin_wayland rPx,
@{bin}/sddm-greeter{,-qt6} rPx, @{bin}/sddm-greeter{,-qt6} rPx,
@{bin}/Xorg rPx, @{bin}/Xorg rPx,

4
apparmor.d/groups/kde/startplasma
View file

@ -25,7 +25,7 @@ profile startplasma @{exec_path} {
/usr/share/color-schemes/{,**} r, /usr/share/color-schemes/{,**} r,
/usr/share/desktop-directories/{,**} r, /usr/share/desktop-directories/{,**} r,
/usr/share/knotifications{5,6}/{,**} r, /usr/share/knotifications{5,6}/{,**} r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/usr/share/kservicetypes5/{,**} r, /usr/share/kservicetypes5/{,**} r,
/usr/share/plasma/{,**} r, /usr/share/plasma/{,**} r,
@ -56,7 +56,7 @@ profile startplasma @{exec_path} {
owner @{user_config_dirs}/Trolltech.conf rwl, owner @{user_config_dirs}/Trolltech.conf rwl,
owner @{user_config_dirs}/Trolltech.conf.lock rwk, owner @{user_config_dirs}/Trolltech.conf.lock rwk,
owner @{user_share_dirs}/kservices5/{,**} r, owner @{user_share_dirs}/kservices{5,6}/{,**} r,
owner @{user_share_dirs}/sddm/wayland-session.log rw, owner @{user_share_dirs}/sddm/wayland-session.log rw,
owner @{user_share_dirs}/sddm/xorg-session.log rw, owner @{user_share_dirs}/sddm/xorg-session.log rw,

5
apparmor.d/groups/kde/systemsettings
View file

@ -21,7 +21,7 @@ profile systemsettings @{exec_path} {
@{bin}/kcminit rPx, @{bin}/kcminit rPx,
/usr/share/kpackage/{,**} r, /usr/share/kpackage/{,**} r,
/usr/share/kservices5/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/usr/share/kservicetypes5/{,**} r, /usr/share/kservicetypes5/{,**} r,
/usr/share/kxmlgui5/systemsettings/systemsettingsui.rc r, /usr/share/kxmlgui5/systemsettings/systemsettingsui.rc r,
/usr/share/plasma/{,**} r, /usr/share/plasma/{,**} r,
@ -51,6 +51,9 @@ profile systemsettings @{exec_path} {
owner @{user_share_dirs}/kactivitymanagerd/resources/database-shm rwk, owner @{user_share_dirs}/kactivitymanagerd/resources/database-shm rwk,
owner @{user_share_dirs}/kactivitymanagerd/resources/database-wal rw, owner @{user_share_dirs}/kactivitymanagerd/resources/database-wal rw,
owner @{user_share_dirs}/systemsettings/ rw,
owner @{user_share_dirs}/systemsettings/** rwlk,
@{sys}/bus/ r, @{sys}/bus/ r,
@{sys}/bus/cpu/devices/ r, @{sys}/bus/cpu/devices/ r,
@{sys}/class/ r, @{sys}/class/ r,