mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 16:03:51 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): add a few gnome core app.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-04-09 23:43:14 +01:00
parent 69f90c5a11
commit 5873cbff95
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
4 changed files with 110 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
apparmor.d/groups/gnome/gnome-calculator Normal file
View File

@ -0,0 +1,25 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/gnome-calculator
profile gnome-calculator @{exec_path} {
include <abstractions/base>
include <abstractions/common/gnome>
include <abstractions/ssl_certs>
# Needed to get currency exchange rates
network inet dgram,
network inet stream,
network inet6 dgram,
network inet6 stream,
network netlink raw,
@{exec_path} mr,
include if exists <local/gnome-calculator>
}

18
apparmor.d/groups/gnome/gnome-clocks Normal file
View File

@ -0,0 +1,18 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/gnome-clocks
profile gnome-clocks @{exec_path} {
include <abstractions/base>
include <abstractions/audio-client>
include <abstractions/common/gnome>
@{exec_path} mr,
include if exists <local/gnome-clocks>
}

30
apparmor.d/groups/gnome/gnome-logs Normal file
View File

@ -0,0 +1,30 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/gnome-logs
profile gnome-logs @{exec_path} {
include <abstractions/base>
include <abstractions/common/gnome>
include <abstractions/user-download-strict>
@{exec_path} mr,
/etc/machine-id r,
/var/lib/systemd/catalog/database r,
/{run,var}/log/journal/ r,
/{run,var}/log/journal/@{hex32}/ r,
/{run,var}/log/journal/@{hex32}/system.journal r,
/{run,var}/log/journal/@{hex32}/system@@{hex32}-@{hex}-@{hex}.journal r,
/{run,var}/log/journal/@{hex32}/user-@{uid}.journal r,
/{run,var}/log/journal/@{hex32}/user-1000@@{hex32}-@{hex}-@{hex}.journal r,
/{run,var}/log/journal/remote/ r,
include if exists <local/gnome-logs>
}

37
apparmor.d/groups/gnome/yelp Normal file
View File

@ -0,0 +1,37 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/yelp @{bin}/gnome-help
profile yelp @{exec_path} {
include <abstractions/base>
include <abstractions/common/gnome>
network netlink raw,
@{exec_path} mr,
@{lib}/{,@{multiarch}/}webkit{2,}gtk-*/WebKitNetworkProcess rix,
@{lib}/{,@{multiarch}/}webkit{2,}gtk-*/WebKitWebProcess rix,
/usr/share/help/{,**} r,
/usr/share/yelp-xsl/{,**} r,
/usr/share/xml/{,**} r,
/etc/xml/{,**} r,
@{sys}/devices/virtual/dmi/id/chassis_type r,
@{sys}/fs/cgroup/user.slice/user-@{uid}.slice/user@@{uid}.service/app.slice/app-gnome-yelp-*.scope/memory.* r,
@{PROC}/zoneinfo r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/smaps r,
owner @{PROC}/@{pid}/statm r,
include if exists <local/yelp>
}