mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 07:54:17 +01:00
parent
7b04e28835
commit
54e013824e
@ -15,6 +15,8 @@ profile libreoffice @{exec_path} {
|
|||||||
include <abstractions/dconf-write>
|
include <abstractions/dconf-write>
|
||||||
include <abstractions/desktop>
|
include <abstractions/desktop>
|
||||||
include <abstractions/enchant>
|
include <abstractions/enchant>
|
||||||
|
include <abstractions/fontconfig-cache-read>
|
||||||
|
include <abstractions/graphics>
|
||||||
include <abstractions/nameservice-strict>
|
include <abstractions/nameservice-strict>
|
||||||
include <abstractions/ssl_certs>
|
include <abstractions/ssl_certs>
|
||||||
include <abstractions/user-read-strict>
|
include <abstractions/user-read-strict>
|
||||||
@ -41,14 +43,14 @@ profile libreoffice @{exec_path} {
|
|||||||
|
|
||||||
@{open_path} rPx -> child-open-browsers,
|
@{open_path} rPx -> child-open-browsers,
|
||||||
|
|
||||||
@{bin}/gpgconf rPx,
|
@{bin}/gpg rPx,
|
||||||
@{bin}/gpgsm rPx,
|
@{bin}/gpgconf rPx,
|
||||||
@{bin}/gpg rPx,
|
@{bin}/gpgsm rPx,
|
||||||
|
|
||||||
@{lib}/libreoffice/program/javaldx rix,
|
@{lib}/libreoffice/program/javaldx rix,
|
||||||
@{lib}/libreoffice/program/oosplash rix,
|
@{lib}/libreoffice/program/oosplash rix,
|
||||||
@{lib}/libreoffice/program/soffice.bin rix,
|
@{lib}/libreoffice/program/soffice.bin rix,
|
||||||
@{lib}/jvm/java*/bin/java rix,
|
@{lib}/jvm/java*/bin/java rix,
|
||||||
@{lib}/jvm/java*/lib/** rm,
|
@{lib}/jvm/java*/lib/** rm,
|
||||||
|
|
||||||
@{lib}/libreoffice/{,**} rm,
|
@{lib}/libreoffice/{,**} rm,
|
||||||
@ -70,6 +72,10 @@ profile libreoffice @{exec_path} {
|
|||||||
owner @{user_config_dirs}/libreoffice/ rw,
|
owner @{user_config_dirs}/libreoffice/ rw,
|
||||||
owner @{user_config_dirs}/libreoffice/** rwk,
|
owner @{user_config_dirs}/libreoffice/** rwk,
|
||||||
|
|
||||||
|
owner @{user_config_dirs}/kcminputrc r,
|
||||||
|
owner @{user_config_dirs}/kdedefaults/kcminputrc r,
|
||||||
|
|
||||||
|
owner @{tmp}/ r,
|
||||||
owner @{tmp}/@{rand6} rwk,
|
owner @{tmp}/@{rand6} rwk,
|
||||||
owner @{tmp}/*.tmp/{,**} rwk,
|
owner @{tmp}/*.tmp/{,**} rwk,
|
||||||
owner @{tmp}/OSL_PIPE_@{uid}_SingleOfficeIPC_@{hex} w,
|
owner @{tmp}/OSL_PIPE_@{uid}_SingleOfficeIPC_@{hex} w,
|
||||||
|
Loading…
Reference in New Issue
Block a user