diff --git a/apparmor.d/groups/gnome/gnome-calculator-search-provider b/apparmor.d/groups/gnome/gnome-calculator-search-provider new file mode 100644 index 00000000..92ae12a6 --- /dev/null +++ b/apparmor.d/groups/gnome/gnome-calculator-search-provider @@ -0,0 +1,30 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}lib/gnome-calculator-search-provider +profile gnome-calculator-search-provider @{exec_path} { + include + include + + signal (send) set=kill peer=unconfined, + + @{exec_path} mr, + /{usr/,}bin/[a-z0-9]* rPUx, + + /usr/share/glib-2.0/schemas/gschemas.compiled r, + /usr/share/X11/xkb/{,**} r, + /usr/share/icons/{,**} r, + + include + owner @{run}/user/@{uid}/dconf/ rw, + owner @{run}/user/@{uid}/dconf/user rw, + + owner @{PROC}/@{pid}/fd/ r, + + include if exists +} diff --git a/apparmor.d/groups/gnome/gnome-contacts-search-provider b/apparmor.d/groups/gnome/gnome-contacts-search-provider new file mode 100644 index 00000000..2f1f75db --- /dev/null +++ b/apparmor.d/groups/gnome/gnome-contacts-search-provider @@ -0,0 +1,30 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}lib/gnome-contacts-search-provider +profile gnome-contacts-search-provider @{exec_path} { + include + include + + signal (send) set=(term) peer=unconfined, + + @{exec_path} mr, + + /usr/share/glib-2.0/schemas/gschemas.compiled r, + /usr/share/mime/mime.cache r, + + owner @{user_share_dirs}/folks/relationships.ini r, + + include + owner @{run}/user/@{uid}/dconf/ rw, + owner @{run}/user/@{uid}/dconf/user rw, + + owner @{PROC}/@{pid}/cmdline r, + + include if exists +} diff --git a/apparmor.d/groups/gnome/gnome-control-center-print-renderer b/apparmor.d/groups/gnome/gnome-control-center-print-renderer new file mode 100644 index 00000000..97de5ecf --- /dev/null +++ b/apparmor.d/groups/gnome/gnome-control-center-print-renderer @@ -0,0 +1,37 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2021 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /{usr/,}lib/gnome-control-center-print-renderer +profile gnome-control-center-print-renderer @{exec_path} { + include + include + include + include + include + + @{exec_path} mr, + + /usr/share/glib-2.0/schemas/gschemas.compiled r, + /usr/share/glvnd/egl_vendor.d/{,*.json} r, + /usr/share/icons/{,**} r, + /usr/share/mime/mime.cache r, + /usr/share/X11/xkb/** r, + + owner @{user_cache_dirs}/mesa_shader_cache/index rw, + + owner @{run}/user/@{uid}/gdm/Xauthority r, + + include + owner @{run}/user/@{uid}/dconf/ rw, + owner @{run}/user/@{uid}/dconf/user rw, + + owner @{PROC}/@{pid}/cmdline r, + @{PROC}/sys/dev/i915/perf_stream_paranoid r, + + include if exists +}