diff --git a/apparmor.d/groups/gnome/evolution-addressbook-factory b/apparmor.d/groups/gnome/evolution-addressbook-factory new file mode 100644 index 00000000..ff7c0635 --- /dev/null +++ b/apparmor.d/groups/gnome/evolution-addressbook-factory @@ -0,0 +1,34 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-3.0-or-later + +abi , + +include + +@{exec_path} = /{usr/,}lib/evolution-addressbook-factory +profile evolution-addressbook-factory @{exec_path} { + include + include + include + include + + network inet stream, + network inet6 stream, + network inet dgram, + network inet6 dgram, + network netlink raw, + + @{exec_path} mr, + @{exec_path}-subprocess rix, + /usr/share/glib-2.0/schemas/gschemas.compiled r, + + owner @{user_share_dirs}/evolution/{,**} rwk, + owner @{user_cache_dirs}/evolution/addressbook/{,**} rwk, + + include + owner @{run}/user/[0-9]*/dconf/ rw, + owner @{run}/user/[0-9]*/dconf/user rw, + + include if exists +} diff --git a/apparmor.d/groups/gnome/evolution-alarm-notify b/apparmor.d/groups/gnome/evolution-alarm-notify new file mode 100644 index 00000000..87f138a3 --- /dev/null +++ b/apparmor.d/groups/gnome/evolution-alarm-notify @@ -0,0 +1,37 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-3.0-or-later + +abi , + +include + +@{exec_path} = /{usr/,}lib/evolution-data-server/evolution-alarm-notify +profile evolution-alarm-notify @{exec_path} { + include + include + include + include + include + include + + @{exec_path} mr, + + /etc/fonts/{,**} r, + + /usr/share/glib-2.0/schemas/gschemas.compiled r, + /usr/share/mime/mime.cache r, + /usr/share/applications/{,**} r, + /usr/share/icons/{,**} r, + /usr/share/X11/xkb/** r, + /usr/share/fonts/{,**} r, + + owner @{user_config_dirs}/mimeapps.list r, + owner @{user_share_dirs}/applications/{,**} r, + + include + owner @{run}/user/[0-9]*/dconf/ rw, + owner @{run}/user/[0-9]*/dconf/user rw, + + include if exists +} diff --git a/apparmor.d/groups/gnome/evolution-calendar-factory b/apparmor.d/groups/gnome/evolution-calendar-factory new file mode 100644 index 00000000..bcdbdd1c --- /dev/null +++ b/apparmor.d/groups/gnome/evolution-calendar-factory @@ -0,0 +1,36 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-3.0-or-later + +abi , + +include + +@{exec_path} = /{usr/,}lib/evolution-calendar-factory +profile evolution-calendar-factory @{exec_path} { + include + include + include + include + + network inet stream, + network inet6 stream, + network inet dgram, + network inet6 dgram, + network netlink raw, + + @{exec_path} mr, + @{exec_path}-subprocess rix, + /usr/share/glib-2.0/schemas/gschemas.compiled r, + + owner @{user_share_dirs}/evolution/calendar/{,**} rwk, + owner @{user_share_dirs}/evolution/tasks/system/tasks.ics r, + owner @{user_cache_dirs}/evolution/calendar/{,**} rwk, + owner @{user_cache_dirs}/evolution/tasks/{,**} rwk, + + include + owner @{run}/user/[0-9]*/dconf/ rw, + owner @{run}/user/[0-9]*/dconf/user rw, + + include if exists +} diff --git a/apparmor.d/groups/gnome/evolution-source-registry b/apparmor.d/groups/gnome/evolution-source-registry new file mode 100644 index 00000000..d2acb5fb --- /dev/null +++ b/apparmor.d/groups/gnome/evolution-source-registry @@ -0,0 +1,35 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-3.0-or-later + +abi , + +include + +@{exec_path} = /{usr/,}lib/evolution-source-registry +profile evolution-source-registry @{exec_path} { + include + include + include + include + + network inet stream, + network inet6 stream, + network inet dgram, + network inet6 dgram, + network netlink raw, + + @{exec_path} mr, + /usr/share/glib-2.0/schemas/gschemas.compiled r, + + owner @{user_config_dirs}/evolution/sources/{,*} r, + owner @{user_share_dirs}/evolution/{,**} r, + owner @{user_share_dirs}/gvfs-metadata/{,*} r, + owner @{user_cache_dirs}/evolution/{,**} rwk, + + include + owner @{run}/user/[0-9]*/dconf/ rw, + owner @{run}/user/[0-9]*/dconf/user rw, + + include if exists +}