mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profiles): update akonadi.

Browse source 
See #134
This commit is contained in:
Alexandre Pujol 2023-04-24 18:53:36 +01:00
parent a4dd6d52cd
commit 52d49fa3ec
Failed to generate hash of commit
15 changed files with 139 additions and 36 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/akonadi/akonadi_akonotes_resource
View file

@ -10,9 +10,11 @@ include <tunables/global>
profile akonadi_akonotes_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
@ -20,12 +22,17 @@ profile akonadi_akonotes_resource @{exec_path} {
/usr/share/hwdata/*.ids r,
/usr/share/qt/translations/*.qm r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_akonotes_resource_[0-9]rc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_akonotes_resource_[0-9]{,_changes.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_share_dirs}/notes/**/ r,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,

13
apparmor.d/groups/akonadi/akonadi_archivemail_agent
View file

@ -10,28 +10,35 @@ include <tunables/global>
profile akonadi_archivemail_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/*.desktop r,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/usr/share/qt{5,}/translations/*.qm r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/#[0-9]* rw,
owner @{user_config_dirs}/akonadi_archivemail_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_archivemail_agent r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_archivemail_agent_changes{,.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/emaildefaults r,
owner @{user_config_dirs}/emailidentities.lock rwk,
owner @{user_config_dirs}/emailidentities* rwl,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,

8
apparmor.d/groups/akonadi/akonadi_birthdays_resource
View file

@ -10,15 +10,21 @@ include <tunables/global>
profile akonadi_birthdays_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/qt/translations/*.qm r,
/usr/share/qt{5,}/translations/*.qm r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,

6
apparmor.d/groups/akonadi/akonadi_contacts_resource
View file

@ -10,15 +10,19 @@ include <tunables/global>
profile akonadi_contacts_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/qt/translations/*.qm r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,

6
apparmor.d/groups/akonadi/akonadi_control
View file

@ -14,6 +14,7 @@ profile akonadi_control @{exec_path} {
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/X-strict>
include <abstractions/qt5>
@{exec_path} mr,
@ -22,7 +23,10 @@ profile akonadi_control @{exec_path} {
/usr/share/akonadi/{,**} r,
/usr/share/hwdata/*.ids r,
/usr/share/qt/translations/*.qm r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/akonadi/{,**} rwl,

8
apparmor.d/groups/akonadi/akonadi_followupreminder_agent
View file

@ -10,10 +10,12 @@ include <tunables/global>
profile akonadi_followupreminder_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/X-strict>
include <abstractions/qt5>
network inet dgram,
network inet6 dgram,
@ -22,10 +24,14 @@ profile akonadi_followupreminder_agent @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/qt/translations/*.qm r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_followupreminder_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_followupreminder_agent{,_changes.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,

12
apparmor.d/groups/akonadi/akonadi_indexing_agent
View file

@ -10,18 +10,24 @@ include <tunables/global>
profile akonadi_indexing_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/*.desktop r,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -34,7 +40,7 @@ profile akonadi_indexing_agent @{exec_path} {
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/akonadi/search_db/** rwk,
owner @{user_share_dirs}/akonadi/** rwk,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r,

20
apparmor.d/groups/akonadi/akonadi_maildir_resource
View file

@ -10,30 +10,38 @@ include <tunables/global>
profile akonadi_maildir_resource @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/*.desktop r,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_maildir_resource_[0-9]{,_changes.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/akonadi_maildir_resource_[0-9]rc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_maildir_resource_[0-9]{,_changes.dat} rw,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/local-mail/{,**} r,
owner @{user_share_dirs}/akonadi/{,**} rwk,
owner @{user_share_dirs}/local-mail*/{,**} rw,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/core_pattern rw,
/dev/tty r,

14
apparmor.d/groups/akonadi/akonadi_maildispatcher_agent
View file

@ -10,8 +10,12 @@ include <tunables/global>
profile akonadi_maildispatcher_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
network inet dgram,
@ -23,13 +27,17 @@ profile akonadi_maildispatcher_agent @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
/etc/machine-id r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_maildispatcher_agent_changes.dat r,
owner @{user_config_dirs}/akonadi/#[0-9]* rw,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_maildispatcher_agent* rwkl,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,

21
apparmor.d/groups/akonadi/akonadi_mailfilter_agent
View file

@ -10,37 +10,50 @@ include <tunables/global>
profile akonadi_mailfilter_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
ptrace (read) peer=akonadi_archivemail_agent,
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/*.desktop r,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/#[0-9]* rw,
owner @{user_config_dirs}/agent_config_akonadi_mailfilter_agent r,
owner @{user_config_dirs}/akonadi_*_resource_*rc r,
owner @{user_config_dirs}/akonadi_mailfilter_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_mailfilter_agent_changes{,.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/emaildefaults r,
owner @{user_config_dirs}/emailidentities.lock rwk,
owner @{user_config_dirs}/emailidentities* rwl,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/specialmailcollectionsrc r,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_config_dirs}/specialmailcollectionsrc r,
owner @{user_share_dirs}/akonadi/file_db_data/{,**} r,
@{PROC}/sys/kernel/core_pattern r,
@{PROC}/sys/kernel/random/boot_id r,

14
apparmor.d/groups/akonadi/akonadi_migration_agent
View file

@ -9,20 +9,26 @@ include <tunables/global>
@{exec_path} = /{usr/,}bin/akonadi_migration_agent
profile akonadi_migration_agent @{exec_path} {
include <abstractions/base>
include <abstractions/X-strict>
include <abstractions/dri-common>
include <abstractions/nameservice-strict>
include <abstractions/dri-enumerate>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi-migrationrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_migration_agent_changes{,.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,

11
apparmor.d/groups/akonadi/akonadi_newmailnotifier_agent
View file

@ -10,22 +10,29 @@ include <tunables/global>
profile akonadi_newmailnotifier_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/knotifications5/akonadi_newmailnotifier_agent.notifyrc r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/#[0-9]* rw,
owner @{user_config_dirs}/akonadi_newmailnotifier_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_newmailnotifier_agent_changes{,_changes.dat,.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/emaildefaults r,

9
apparmor.d/groups/akonadi/akonadi_notes_agent
View file

@ -10,8 +10,12 @@ include <tunables/global>
profile akonadi_notes_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
network inet dgram,
@ -22,12 +26,15 @@ profile akonadi_notes_agent @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_*_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_notes_agent_changes{,.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,

15
apparmor.d/groups/akonadi/akonadi_sendlater_agent
View file

@ -9,10 +9,14 @@ include <tunables/global>
@{exec_path} = /{usr/,}bin/akonadi_sendlater_agent
profile akonadi_sendlater_agent @{exec_path} {
include <abstractions/base>
include <abstractions/X-strict>
include <abstractions/dri-common>
include <abstractions/nameservice-strict>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
network inet dgram,
network inet6 dgram,
@ -22,12 +26,15 @@ profile akonadi_sendlater_agent @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_sendlater_agentrc r,
owner @{user_config_dirs}/akonadi/agent_config_akonadi_sendlater_agent_changes{,.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,

11
apparmor.d/groups/akonadi/akonadi_unifiedmailbox_agent
View file

@ -10,19 +10,26 @@ include <tunables/global>
profile akonadi_unifiedmailbox_agent @{exec_path} {
include <abstractions/base>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/vulkan>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
/usr/share/icu/[0-9]*.[0-9]*/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_unifiedmailbox_agentrc r,
owner @{user_config_dirs}/{*,akonadi/}agent_config_akonadi_unifiedmailbox_agent{,_changes.dat,.conf_changes.dat} r,
owner @{user_config_dirs}/{*,akonadi/}akonadi_unifiedmailbox_agent{,_changes.dat,.conf_changes.dat} r,
owner @{user_config_dirs}/akonadi/akonadiconnectionrc r,