mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-02-21 17:35:50 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Dolphin updates

Browse source 
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
This commit is contained in:
Jeroen Rijken 2024-02-18 17:29:13 +01:00 • committed by Alex
parent 7fa4113131
commit 640cf9e1d3
2 changed files with 34 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
apparmor.d/abstractions/bus/org.freedesktop.UDisks2
View file

@ -12,6 +12,31 @@
member=GetAll member=GetAll
peer=(name=:*, label=udisksd), peer=(name=:*, label=udisksd),
dbus send bus=system path=/
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=udisksd),
dbus send bus=system path=/
interface=org.freedesktop.DBus.Properties
member=Get
peer=(name=:*, label=udisksd),
dbus send bus=system path=/org/freedesktop/UDisks2/drives{,/*}
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=udisksd),
dbus send bus=system path=/org/freedesktop/UDisks2/drives{,/*}
interface=org.freedesktop.DBus.Properties
member={Get,GetAll}
peer=(name=:*, label=udisksd),
dbus send bus=system path=/org/freedesktop/UDisks2/block_devices/*
interface=org.freedesktop.DBus.Introspectable
member=Introspect
peer=(name=:*, label=udisksd),
dbus receive bus=system path=/org/freedesktop/UDisks2 dbus receive bus=system path=/org/freedesktop/UDisks2
interface=org.freedesktop.DBus.ObjectManager interface=org.freedesktop.DBus.ObjectManager
member=InterfacesAdded member=InterfacesAdded

10
apparmor.d/groups/kde/dolphin
View file

@ -10,6 +10,9 @@ include <tunables/global>
profile dolphin @{exec_path} { profile dolphin @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/app-launcher-user> include <abstractions/app-launcher-user>
include <abstractions/bus-session>
include <abstractions/bus-system>
include <abstractions/bus/org.freedesktop.UDisks2>
include <abstractions/deny-sensitive-home> include <abstractions/deny-sensitive-home>
include <abstractions/devices-usb> include <abstractions/devices-usb>
include <abstractions/graphics> include <abstractions/graphics>
@ -36,12 +39,15 @@ profile dolphin @{exec_path} {
/etc/xdg/arkrc r, /etc/xdg/arkrc r,
/etc/xdg/dolphinrc r, /etc/xdg/dolphinrc r,
/etc/xdg/menus/ r, /etc/xdg/menus/ r,
/etc/xdg/menus/applications-merged/ r,
/etc/xdg/ui/ui_standards.rc r, /etc/xdg/ui/ui_standards.rc r,
# Full access to user's data # Full access to user's data
/ r, / r,
owner @{HOME}/{,**} rw, owner @{HOME}/{,**} rw,
/var/lib/flatpak/exports/share/mime/ r,
# Silence non user's data # Silence non user's data
deny /boot/{,**} r, deny /boot/{,**} r,
deny /opt/{,**} r, deny /opt/{,**} r,
@ -74,7 +80,9 @@ profile dolphin @{exec_path} {
owner @{PROC}/@{pid}/mountinfo r, owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r, owner @{PROC}/@{pid}/mounts r,
@{sys}/devices/virtual/block/dm-0/uevent r,
/dev/tty r, /dev/tty r,
include if exists <local/dolphin> include if exists <local/dolphin>
} }