mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 17:08:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Some fixes.

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-16 13:37:15 +01:00
parent d41df93da1
commit 53b01b1132
Failed to generate hash of commit
4 changed files with 14 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/groups/desktop/dbus-daemon
View file

@ -37,7 +37,7 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
/usr/share/defaults/**.conf r, /usr/share/defaults/**.conf r,
owner @{user_share_dirs}/dbus-1/{,**} r, owner @{user_share_dirs}/dbus-1/{,**} r,
owner @{user_share_dirs}/icc/{,edid-*} r, @{user_share_dirs}/icc/{,edid-*} r,
owner @{PROC}/@{pid}/mounts r, owner @{PROC}/@{pid}/mounts r,
owner @{PROC}/@{pid}/oom_score_adj rw, owner @{PROC}/@{pid}/oom_score_adj rw,
@ -65,7 +65,7 @@ profile dbus-daemon @{exec_path} flags=(attach_disconnected) {
/tmp/dbus-[0-9a-zA-Z]* rw, /tmp/dbus-[0-9a-zA-Z]* rw,
# file_inherit # file_inherit
owner /dev/tty[0-9]* rw, /dev/tty[0-9]* rw,
include if exists <local/dbus-daemon> include if exists <local/dbus-daemon>
} }

4
apparmor.d/groups/desktop/dbus-run-session
View file

@ -30,8 +30,8 @@ profile dbus-run-session @{exec_path} {
/var/lib/gdm/.config/dconf/user r, /var/lib/gdm/.config/dconf/user r,
# file_inherit # file_inherit
owner /dev/tty rw, /dev/tty rw,
owner /dev/tty[0-9]* rw, /dev/tty[0-9]* rw,
include if exists <local/dbus-run-session> include if exists <local/dbus-run-session>
} }

3
apparmor.d/groups/gnome/gnome-shell
View file

@ -141,5 +141,8 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
owner /tmp/gdkpixbuf-xpm-tmp.[0-9A-Z]* rw, owner /tmp/gdkpixbuf-xpm-tmp.[0-9A-Z]* rw,
/tmp/.X11-unix/X[0-9] rw, /tmp/.X11-unix/X[0-9] rw,
# file_inherit
/dev/tty[0-9]* rw,
include if exists <local/gnome-shell> include if exists <local/gnome-shell>
} }

9
apparmor.d/profiles-a-l/git
View file

@ -18,9 +18,9 @@ include <tunables/global>
profile git @{exec_path} { profile git @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/nameservice-strict>
include <abstractions/openssl> include <abstractions/openssl>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/nameservice-strict>
network inet dgram, network inet dgram,
network inet6 dgram, network inet6 dgram,
@ -35,7 +35,7 @@ profile git @{exec_path} {
# /usr/bin/ , so allow only this location. # /usr/bin/ , so allow only this location.
/{usr/,}bin/ r, /{usr/,}bin/ r,
deny /{usr/,}sbin/ r, deny /{usr/,}sbin/ r,
deny /usr/local/bin/ r, deny /usr/local/{s,}bin/ r,
deny /usr/games/ r, deny /usr/games/ r,
deny /usr/local/games/ r, deny /usr/local/games/ r,
@ -152,8 +152,13 @@ profile git @{exec_path} {
owner @{HOME}/.selected_editor r, owner @{HOME}/.selected_editor r,
/usr/share/terminfo/x/xterm-256color r,
/usr/share/vim/{,**} r, /usr/share/vim/{,**} r,
/etc/vimrc r,
/etc/vim/{,**} r, /etc/vim/{,**} r,
owner @{user_cache_dirs}/vim/{,**} rw,
owner @{user_config_dirs}/vim/{,**} r,
owner @{HOME}/.viminfo{,.tmp} rw, owner @{HOME}/.viminfo{,.tmp} rw,
owner @{HOME}/.fzf/plugin/ r, owner @{HOME}/.fzf/plugin/ r,