mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): ensure any gnome extension can be launched.

Browse Source 
see #422
This commit is contained in:
Alexandre Pujol 2024-07-20 13:06:30 +01:00
parent 6073dc491f
commit 245898a9d2
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
4 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
apparmor.d/groups/bus/dbus-session
View File

@ -40,6 +40,7 @@ profile dbus-session flags=(attach_disconnected) {
@{bin}/** PUx, @{bin}/** PUx,
@{lib}/** PUx, @{lib}/** PUx,
@{user_share_dirs}/*/** PUx,
/usr/share/*/** PUx, /usr/share/*/** PUx,
/etc/dbus-1/{,**} r, /etc/dbus-1/{,**} r,

7
apparmor.d/groups/gnome/gnome-extension-ding
View File

@ -6,7 +6,10 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = /usr/share/gnome-shell/extensions/ding@rastersoft.com/{,app/}ding.js @{share_dirs} = /usr/share/gnome-shell/extensions/ding@rastersoft.com
@{share_dirs} += @{user_share_dirs}/gnome-shell/extensions/ding@rastersoft.com
@{exec_path} = @{share_dirs}/{,app/}ding.js
profile gnome-extension-ding @{exec_path} { profile gnome-extension-ding @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/audio-client> include <abstractions/audio-client>
@ -57,7 +60,7 @@ profile gnome-extension-ding @{exec_path} {
@{bin}/gnome-control-center rPx, @{bin}/gnome-control-center rPx,
@{bin}/nautilus rPx, @{bin}/nautilus rPx,
/usr/share/gnome-shell/extensions/ding@rastersoft.com/{,app/}* r, @{share_dirs}/{,**} r,
/usr/share/thumbnailers/{,*.thumbnailer} r, /usr/share/thumbnailers/{,*.thumbnailer} r,
owner @{HOME}/@{XDG_TEMPLATES_DIR}/ r, owner @{HOME}/@{XDG_TEMPLATES_DIR}/ r,

4
apparmor.d/groups/gnome/gnome-extension-gsconnect
View File

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{share_dirs} = /usr/share/gnome-shell/extensions/gsconnect@andyholmes.github.io/ @{share_dirs} = /usr/share/gnome-shell/extensions/gsconnect@andyholmes.github.io
@{share_dirs} += @{user_share_dirs}/gnome-shell/extensions/gsconnect@andyholmes.github.io/ @{share_dirs} += @{user_share_dirs}/gnome-shell/extensions/gsconnect@andyholmes.github.io
@{exec_path} = @{share_dirs}/service/daemon.js @{exec_path} = @{share_dirs}/service/daemon.js
profile gnome-extension-gsconnect @{exec_path} { profile gnome-extension-gsconnect @{exec_path} {

3
apparmor.d/groups/gnome/gnome-shell
View File

@ -188,7 +188,8 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
@{lib}/gio-launch-desktop rCx -> open, @{lib}/gio-launch-desktop rCx -> open,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rCx -> open, @{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop rCx -> open,
/usr/share/gnome-shell/extensions/ding@rastersoft.com/{,*/}ding.js rPx, @{user_share_dirs}/gnome-shell/extensions/*/** rPUx,
/usr/share/gnome-shell/extensions/*/** rPUx,
/opt/**/share/icons/{,**} r, /opt/**/share/icons/{,**} r,
/opt/*/**/*.png r, /opt/*/**/*.png r,