mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-02-07 02:35:06 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

General update (#172)

Browse source 
* Update akonadi_mailfilter_agent

* Update plasmashell

https://github.com/roddhjav/apparmor.d/discussions/168

Adding k, to the "targets" suggested by audit.log

* Update pacman
This commit is contained in:
curiosityseeker 2023-07-04 11:55:51 +02:00 committed by GitHub
parent 69490ed262
commit 10bd4973c5
Failed to generate hash of commit
3 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/groups/akonadi/akonadi_mailfilter_agent
View file

@ -51,10 +51,15 @@ profile akonadi_mailfilter_agent @{exec_path} {
owner @{user_config_dirs}/kmail2rc r, owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/kwinrc r, owner @{user_config_dirs}/kwinrc r,
owner /tmp/#[0-9]* rw,
owner /tmp/akonadi_mailfilter_agent.* rwl,
owner @{user_config_dirs}/specialmailcollectionsrc r, owner @{user_config_dirs}/specialmailcollectionsrc r,
owner @{user_share_dirs}/akonadi/file_db_data/{,**} rw, owner @{user_share_dirs}/akonadi/file_db_data/{,**} rw,
@{system_share_dirs}/akonadi/plugins/serializer/{,akonadi_serializer_*.desktop} r,
@{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r, @{PROC}/sys/kernel/random/boot_id r,

4
apparmor.d/groups/kde/plasmashell
View file

@ -89,7 +89,7 @@ profile plasmashell @{exec_path} {
owner @{user_templates_dirs}/ r, owner @{user_templates_dirs}/ r,
owner @{user_cache_dirs}/ r, owner @{user_cache_dirs}/ r,
owner @{user_cache_dirs}/#[0-9]* rw, owner @{user_cache_dirs}/#[0-9]* rwk,
owner @{user_cache_dirs}/event-sound-cache.tdb.*.x86_64-pc-linux-gnu rwk, owner @{user_cache_dirs}/event-sound-cache.tdb.*.x86_64-pc-linux-gnu rwk,
owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/ksycoca5_* r, owner @{user_cache_dirs}/ksycoca5_* r,
@ -101,7 +101,7 @@ profile plasmashell @{exec_path} {
owner @{user_cache_dirs}/plasmashell/qmlcache/{,**} rwl, owner @{user_cache_dirs}/plasmashell/qmlcache/{,**} rwl,
owner @{user_config_dirs}/*kde*.desktop* r, owner @{user_config_dirs}/*kde*.desktop* r,
owner @{user_config_dirs}/#[0-9]* rw, owner @{user_config_dirs}/#[0-9]* rwk,
owner @{user_config_dirs}/akonadi-firstrunrc r, owner @{user_config_dirs}/akonadi-firstrunrc r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r, owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/baloofilerc r, owner @{user_config_dirs}/baloofilerc r,

2
apparmor.d/groups/pacman/pacman
View file

@ -173,6 +173,8 @@ profile pacman @{exec_path} {
@{HOME}/@{XDG_GPG_DIR}/*.conf r, @{HOME}/@{XDG_GPG_DIR}/*.conf r,
/dev/tty[0-9]* rw,
deny network inet stream, deny network inet stream,
deny network inet6 stream, deny network inet6 stream,
} }