feat(kde): add kauth helper.

This commit is contained in:
Alexandre Pujol 2023-04-05 23:51:27 +01:00
parent 1a09d74df3
commit 4f22a6ebaa
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
7 changed files with 88 additions and 5 deletions

View File

@ -44,7 +44,7 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
@{libexec}/kf5/kiod5 rPUx,
/{usr/,}bin/ r,
/{usr/,}bin/[a-z0-9]* rPUx,
/{usr/,}lib{,exec}/dbus-1.0/dbus-daemon-launch-helper rPx,
/{usr/,}lib{,exec}/dbus-1*/dbus-daemon-launch-helper rPx,
/{usr/,}lib/@{multiarch}/tumbler-1/tumblerd rPUx,
/{usr/,}lib/@{multiarch}/xfce4/xfconf/xfconfd rPUx,
/{usr/,}lib/ibus/ibus-* rPx,

View File

@ -19,13 +19,13 @@ profile dbus-daemon-launch-helper @{exec_path} {
@{exec_path} mr,
@{libexec}/{,cups-pk-helper/}cups-pk-helper-mechanism rPx,
@{libexec}/kauth/backlighthelper rPx,
@{libexec}/kauth/chargethresholdhelper rPx,
@{libexec}/kauth/discretegpuhelper rPx,
@{libexec}/kauth/kded-smart-helper rPx,
@{libexec}/language-selector/ls-dbus-backend rPx,
/{usr/,}lib/@{multiarch}/cups-pk-helper-mechanism rPx,
/{usr/,}lib/software-properties/software-properties-dbus rPx,
/{usr/,}lib/kauth/discretegpuhelper rPUx, # TODO: rPx,
/{usr/,}lib/kauth/chargethresholdhelper rPUx, # TODO: rPx,
/{usr/,}lib/kauth/backlighthelper rPUx, # TODO: rPx,
/{usr/,}lib/kauth/kded-smart-helper rPUx, # TODO: rPx,
/usr/share/org.gnome.Characters/org.gnome.Characters.BackgroundService rPx,
/usr/share/usb-creator/usb-creator-helper rPx,

View File

@ -0,0 +1,24 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/kauth/backlighthelper
profile kauth-backlighthelper @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
capability net_admin,
@{exec_path} mr,
@{sys}/class/backlight/ r,
@{sys}/class/leds/ r,
/dev/tty r,
include if exists <local/kauth-backlighthelper>
}

View File

@ -0,0 +1,19 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/kauth/chargethresholdhelper
profile kauth-chargethresholdhelper @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
@{exec_path} mr,
@{sys}/class/power_supply/ r,
include if exists <local/kauth-chargethresholdhelper>
}

View File

@ -0,0 +1,17 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/kauth/discretegpuhelper
profile kauth-discretegpuhelper @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
@{exec_path} mr,
include if exists <local/kauth-discretegpuhelper>
}

View File

@ -0,0 +1,19 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{libexec}/kauth/kded-smart-helper
profile kauth-kded-smart-helper @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
@{exec_path} mr,
/{usr/,}{s,}bin/smartctl rPx,
include if exists <local/kauth-kded-smart-helper>
}

View File

@ -128,6 +128,10 @@ irqbalance complain
iwctl complain
iwd complain
kaccess complain
kauth-backlighthelper complain
kauth-chargethresholdhelper complain
kauth-discretegpuhelper complain
kauth-kded-smart-helper complain
kernel-install complain
kgx complain
kmod attach_disconnected,complain