Add support for wechat-universal (#540)

* Add support for wechat-universal

* A small fix
This commit is contained in:
EricLin0509 2024-10-02 04:12:35 +08:00 committed by GitHub
parent 507727caa3
commit 3ebaf5bb29
Failed to generate hash of commit

View file

@ -0,0 +1,58 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 EricLin
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{name} = wechat-universal
@{lib_dirs} = /opt/wechat-universal/
@{config_dirs} = @{user_config_dirs}/@{name}
@{cache_dirs} = @{user_cache_dirs}/@{name}
@{exec_path} = @{bin}/wechat-universal @{lib_dirs}/wechat
profile wechat-universal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/common/electron>
include <abstractions/common/bwrap>
include <abstractions/fontconfig-cache-read>
include <abstractions/app/bus>
network netlink raw,
network netlink dgram,
network inet stream,
network inet dgram,
network inet6 dgram,
network inet6 stream,
@{exec_path} mrix,
@{sh_path} rix,
@{lib}/wechat-universal/common.sh ix,
@{bin}/sed ix,
@{bin}/ln ix,
@{bin}/mkdir ix,
@{bin}/lsblk Px,
@{bin}/bwrap rix,
@{bin}/xdg-user-dir rix,
@{lib_dirs}/crashpad_handler ix,
@{open_path} rPx -> child-open-strict,
/etc/lsb-release r,
owner @{HOME}/@{XDG_DOCUMENTS_DIR}/WeChat_Data/{,**} rwk,
owner @{HOME}/.xwechat/{,**} rwk,
owner @{HOME}/.sys1og.conf rw,
@{run}/systemd/inhibit/@{int}.ref rw,
@{run}/utmp r,
@{PROC}/@{pid}/net/route r,
/dev/tty rw,
/dev/pts/@{int} rw,
include if exists <local/wechat-universal>
}