diff --git a/apparmor.d/groups/pacman/mkinitcpio b/apparmor.d/groups/pacman/mkinitcpio index 69289f06..a85c70e9 100644 --- a/apparmor.d/groups/pacman/mkinitcpio +++ b/apparmor.d/groups/pacman/mkinitcpio @@ -82,7 +82,7 @@ profile mkinitcpio @{exec_path} flags=(attach_disconnected) { /usr/share/terminfo/x/xterm-256color r, # Can copy any program to the initframs - /{usr/,}bin/ r, + /{usr/,}{local/,}{s,}bin/ r, /{usr/,}bin/[a-z0-9]* mr, /{usr/,}lib/ r, /{usr/,}lib/plymouth/plymouthd-* mr, diff --git a/apparmor.d/groups/pacman/pacman-hook-mkinitcpio b/apparmor.d/groups/pacman/pacman-hook-mkinitcpio index 28e83113..86e8ea45 100644 --- a/apparmor.d/groups/pacman/pacman-hook-mkinitcpio +++ b/apparmor.d/groups/pacman/pacman-hook-mkinitcpio @@ -20,6 +20,7 @@ profile pacman-hook-mkinitcpio @{exec_path} flags=(attach_disconnected) { /{usr/,}bin/bash rix, /{usr/,}bin/cmp rix, /{usr/,}bin/compgen rix, + /{usr/,}bin/env rix, /{usr/,}bin/install rix, /{usr/,}bin/mkinitcpio rPx, /{usr/,}bin/mv rix, @@ -36,7 +37,7 @@ profile pacman-hook-mkinitcpio @{exec_path} flags=(attach_disconnected) { /boot/initramfs-*.img rw, /boot/initramfs-*-fallback.img rw, - # /dev/tty rw, + /dev/tty rw, # # Inherit Silencer deny network inet6 stream, diff --git a/apparmor.d/groups/systemd/systemd-journald b/apparmor.d/groups/systemd/systemd-journald index 01864dc8..db9be2e5 100644 --- a/apparmor.d/groups/systemd/systemd-journald +++ b/apparmor.d/groups/systemd/systemd-journald @@ -53,6 +53,7 @@ profile systemd-journald @{exec_path} { @{run}/udev/data/c23[0-9]:[0-9]* r, @{run}/udev/data/c24[0-9]:[0-9]* r, @{run}/udev/data/c4:[0-9]* r, + @{run}/udev/data/c51[0-9]:[0-9]* r, @{sys}/devices/**/uevent r, @{sys}/firmware/efi/efivars/SecureBoot-@{uuid} r, diff --git a/apparmor.d/profiles-m-r/mission-control b/apparmor.d/profiles-m-r/mission-control index 436ebd75..4414a1dc 100644 --- a/apparmor.d/profiles-m-r/mission-control +++ b/apparmor.d/profiles-m-r/mission-control @@ -14,6 +14,7 @@ profile mission-control @{exec_path} { network netlink raw, @{exec_path} mr, + /usr/share/telepathy/{,**} r, /usr/share/glib-2.0/schemas/gschemas.compiled r, diff --git a/apparmor.d/profiles-m-r/nvtop b/apparmor.d/profiles-m-r/nvtop index 84c8e5c5..ff0bb994 100644 --- a/apparmor.d/profiles-m-r/nvtop +++ b/apparmor.d/profiles-m-r/nvtop @@ -29,7 +29,7 @@ profile nvtop @{exec_path} flags=(attach_disconnected) { @{run}/udev/data/+drm:* r, @{run}/udev/data/+pci* r, @{run}/udev/data/c226:[0-9]* r, - @{run}/udev/data/c236:[0-9]* r, + @{run}/udev/data/c23[0-9]:[0-9]* r, @{sys}/bus/ r, @{sys}/class/ r, diff --git a/apparmor.d/profiles-s-z/wireplumber b/apparmor.d/profiles-s-z/wireplumber index c1636789..cba431e4 100644 --- a/apparmor.d/profiles-s-z/wireplumber +++ b/apparmor.d/profiles-s-z/wireplumber @@ -36,7 +36,7 @@ profile wireplumber @{exec_path} { @{run}/udev/data/+sound:card[0-9]* r, # For sound @{run}/udev/data/c116:[0-9]* r, # for ALSA - @{run}/udev/data/c236:[0-9]* r, + @{run}/udev/data/c23[0-9]:[0-9]* r, @{run}/udev/data/c50[0-9]:[0-9]* r, @{run}/udev/data/c81:[0-9]* r, # For video4linux