mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-18 17:08:09 +01:00
style(profiles): better header for the abstractions.
This commit is contained in:
parent
10de7941b0
commit
454456a844
7 changed files with 19 additions and 14 deletions
|
@ -1,6 +1,6 @@
|
||||||
# apparmor.d - Full set of apparmor profiles
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# Copyright (C) 2020-2021 Mikhail Morfikov
|
# Copyright (C) 2020-2021 Mikhail Morfikov
|
||||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
# Available Xsessions
|
# Available Xsessions
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
# apparmor.d - Full set of apparmor profiles
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# Copyright (C) 2020-2021 Mikhail Morfikov
|
# Copyright (C) 2020-2022 Mikhail Morfikov
|
||||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
/usr/share/sounds/ r,
|
/usr/share/sounds/ r,
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
# apparmor.d - Full set of apparmor profiles
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# Copyright (C) 2020-2021 Mikhail Morfikov
|
# Copyright (C) 2020-2022 Mikhail Morfikov
|
||||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
owner @{HOME}/.icons/default/index.theme r,
|
owner @{HOME}/.icons/default/index.theme r,
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
# apparmor.d - Full set of apparmor profiles
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# Copyright (C) 2020-2021 Mikhail Morfikov
|
# Copyright (C) 2020-2022 Mikhail Morfikov
|
||||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
# abstract path in ibus < 1.5.22 uses /tmp
|
# abstract path in ibus < 1.5.22 uses /tmp
|
||||||
|
|
|
@ -3,7 +3,9 @@
|
||||||
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
|
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
# allow receiving signals from libvirtd
|
include <abstractions/base>
|
||||||
|
|
||||||
|
# Allow receiving signals from libvirtd
|
||||||
signal (receive) peer=libvirtd,
|
signal (receive) peer=libvirtd,
|
||||||
|
|
||||||
umount,
|
umount,
|
||||||
|
@ -119,4 +121,4 @@
|
||||||
deny /sys/fs/cgroup?*{,/**} wklx,
|
deny /sys/fs/cgroup?*{,/**} wklx,
|
||||||
deny /sys/fs?*{,/**} wklx,
|
deny /sys/fs?*{,/**} wklx,
|
||||||
|
|
||||||
include if exists <local/abstractions/libvirt-lxc>
|
include if exists <abstractions/libvirt-lxc.d>
|
|
@ -1,8 +1,12 @@
|
||||||
# apparmor.d - Full set of apparmor profiles
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# Copyright (C) Libvirt Team
|
# Copyright (C) Libvirt Team
|
||||||
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
|
# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
|
include <abstractions/base>
|
||||||
|
include <abstractions/consoles>
|
||||||
|
include <abstractions/nameservice-strict>
|
||||||
|
|
||||||
# required for reading disk images
|
# required for reading disk images
|
||||||
capability dac_override,
|
capability dac_override,
|
||||||
capability dac_read_search,
|
capability dac_read_search,
|
||||||
|
@ -251,5 +255,4 @@
|
||||||
owner /var/lib/libvirt/qemu/nvram/*_VARS.fd rwk,
|
owner /var/lib/libvirt/qemu/nvram/*_VARS.fd rwk,
|
||||||
owner /var/lib/libvirt/qemu/nvram/*_VARS.ms.fd rwk,
|
owner /var/lib/libvirt/qemu/nvram/*_VARS.ms.fd rwk,
|
||||||
|
|
||||||
# Site-specific additions and overrides. See local/README for details.
|
include if exists <abstractions/libvirt-qemu.d>
|
||||||
include if exists <local/abstractions/libvirt-qemu>
|
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
# apparmor.d - Full set of apparmor profiles
|
# apparmor.d - Full set of apparmor profiles
|
||||||
# Copyright (C) 2020-2021 Mikhail Morfikov
|
# Copyright (C) 2020-2022 Mikhail Morfikov
|
||||||
# 2021 Alexandre Pujol <alexandre@pujol.io>
|
# Copyright (C) 2021-2022 Alexandre Pujol <alexandre@pujol.io>
|
||||||
# SPDX-License-Identifier: GPL-2.0-only
|
# SPDX-License-Identifier: GPL-2.0-only
|
||||||
|
|
||||||
owner @{run}/user/@{uid}/wayland-[0-9]* rw,
|
owner @{run}/user/@{uid}/wayland-[0-9]* rw,
|
||||||
|
|
Loading…
Reference in a new issue