From 68d1222029a554b9531fd96e8fbe74c9eca189eb Mon Sep 17 00:00:00 2001 From: REmerald <55359236+REmerald@users.noreply.github.com> Date: Sun, 16 Jun 2024 17:28:45 +0300 Subject: [PATCH] feat(groups/{u,v,w,x}*): vim syntax support Add vim modeline instructing the editor to use syntax plugin provided by apparmor. Continuation of #395 to keep the diff list relatively short. --- apparmor.d/groups/ubuntu/apport | 4 +++- apparmor.d/groups/ubuntu/apport-checkreports | 4 +++- apparmor.d/groups/ubuntu/apport-gtk | 2 ++ apparmor.d/groups/ubuntu/apt-esm-hook | 4 +++- apparmor.d/groups/ubuntu/apt-esm-json-hook | 4 +++- apparmor.d/groups/ubuntu/check-new-release-gtk | 2 ++ apparmor.d/groups/ubuntu/cron-ubuntu-fan | 4 +++- apparmor.d/groups/ubuntu/do-release-upgrade | 4 +++- apparmor.d/groups/ubuntu/hwe-support-status | 4 +++- apparmor.d/groups/ubuntu/list-oem-metapackages | 4 +++- apparmor.d/groups/ubuntu/livepatch-notification | 4 +++- apparmor.d/groups/ubuntu/notify-reboot-required | 4 +++- apparmor.d/groups/ubuntu/notify-updates-outdated | 4 +++- apparmor.d/groups/ubuntu/package-data-downloader | 4 +++- apparmor.d/groups/ubuntu/package-system-locked | 4 +++- apparmor.d/groups/ubuntu/pro | 4 +++- apparmor.d/groups/ubuntu/release-upgrade-motd | 2 ++ apparmor.d/groups/ubuntu/software-properties-dbus | 2 ++ apparmor.d/groups/ubuntu/software-properties-gtk | 2 ++ apparmor.d/groups/ubuntu/subiquity-console-conf | 2 ++ apparmor.d/groups/ubuntu/ubuntu-advantage | 4 +++- apparmor.d/groups/ubuntu/ubuntu-advantage-desktop-daemon | 4 +++- apparmor.d/groups/ubuntu/ubuntu-advantage-notification | 4 +++- apparmor.d/groups/ubuntu/ubuntu-distro-info | 4 +++- apparmor.d/groups/ubuntu/ubuntu-report | 4 +++- apparmor.d/groups/ubuntu/update-manager | 2 ++ apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot | 4 +++- apparmor.d/groups/ubuntu/update-motd-updates-available | 4 +++- apparmor.d/groups/ubuntu/update-notifier | 2 ++ apparmor.d/groups/virt/cni-bandwidth | 2 ++ apparmor.d/groups/virt/cni-bridge | 4 +++- apparmor.d/groups/virt/cni-calico | 2 ++ apparmor.d/groups/virt/cni-firewall | 4 +++- apparmor.d/groups/virt/cni-flannel | 4 +++- apparmor.d/groups/virt/cni-host-local | 4 +++- apparmor.d/groups/virt/cni-loopback | 2 ++ apparmor.d/groups/virt/cni-portmap | 2 ++ apparmor.d/groups/virt/cni-tuning | 4 +++- apparmor.d/groups/virt/cni-xtables-nft | 2 ++ apparmor.d/groups/virt/cockpit-askpass | 4 +++- apparmor.d/groups/virt/cockpit-bridge | 4 +++- apparmor.d/groups/virt/cockpit-certificate-ensure | 4 +++- apparmor.d/groups/virt/cockpit-certificate-helper | 4 +++- apparmor.d/groups/virt/cockpit-desktop | 4 +++- apparmor.d/groups/virt/cockpit-pcp | 4 +++- apparmor.d/groups/virt/cockpit-session | 2 ++ apparmor.d/groups/virt/cockpit-ssh | 4 +++- apparmor.d/groups/virt/cockpit-tls | 4 +++- apparmor.d/groups/virt/cockpit-update-motd | 4 +++- apparmor.d/groups/virt/cockpit-ws | 4 +++- apparmor.d/groups/virt/cockpit-wsinstance-factory | 4 +++- apparmor.d/groups/virt/containerd | 2 ++ apparmor.d/groups/virt/containerd-shim-runc-v2 | 2 ++ apparmor.d/groups/virt/docker-proxy | 4 +++- apparmor.d/groups/virt/dockerd | 4 +++- apparmor.d/groups/virt/k3s | 2 ++ apparmor.d/groups/virt/kubernetes-pause | 2 ++ apparmor.d/groups/virt/libvirt-dbus | 4 +++- apparmor.d/groups/virt/libvirtd | 2 ++ apparmor.d/groups/virt/virt-aa-helper | 2 ++ apparmor.d/groups/virt/virtinterfaced | 4 +++- apparmor.d/groups/virt/virtiofsd | 4 +++- apparmor.d/groups/virt/virtlockd | 4 +++- apparmor.d/groups/virt/virtlogd | 2 ++ apparmor.d/groups/virt/virtnetworkd | 4 +++- apparmor.d/groups/virt/virtnodedevd | 4 +++- apparmor.d/groups/virt/virtsecretd | 4 +++- apparmor.d/groups/virt/virtstoraged | 4 +++- apparmor.d/groups/whonix/anondate | 4 +++- apparmor.d/groups/whonix/msgcollector | 4 +++- apparmor.d/groups/whonix/msgcollector-br-add | 4 +++- apparmor.d/groups/whonix/msgcollector-generic-gui-message | 4 +++- apparmor.d/groups/whonix/msgcollector-striphtml | 4 +++- apparmor.d/groups/whonix/msgdispatcher | 4 +++- apparmor.d/groups/whonix/msgdispatcher-autostart | 4 +++- apparmor.d/groups/whonix/msgdispatcher-delete | 4 +++- apparmor.d/groups/whonix/msgdispatcher-dispatch | 4 +++- apparmor.d/groups/whonix/open-link-confirmation | 4 +++- apparmor.d/groups/whonix/pam-abort-on-locked-password | 4 +++- apparmor.d/groups/whonix/pam-info | 4 +++- apparmor.d/groups/whonix/pam_faillock_not_if_x | 4 +++- apparmor.d/groups/whonix/rads | 4 +++- apparmor.d/groups/whonix/sdwdate | 4 +++- apparmor.d/groups/whonix/sdwdate-clock-jump | 4 +++- apparmor.d/groups/whonix/sdwdate-gui | 4 +++- apparmor.d/groups/whonix/sdwdate-start | 4 +++- apparmor.d/groups/whonix/sdwdate-wrapper | 4 +++- apparmor.d/groups/whonix/sensible-browser | 4 +++- apparmor.d/groups/whonix/systemcheck-canary | 4 +++- apparmor.d/groups/whonix/timesanitycheck | 4 +++- apparmor.d/groups/whonix/tor-bootstrap-check | 4 +++- apparmor.d/groups/whonix/tor-consensus-valid-after | 4 +++- apparmor.d/groups/whonix/torbrowser | 2 ++ apparmor.d/groups/whonix/torbrowser-glxtest | 4 +++- apparmor.d/groups/whonix/torbrowser-plugin-container | 2 ++ apparmor.d/groups/whonix/torbrowser-start | 2 ++ apparmor.d/groups/whonix/torbrowser-updater | 4 +++- apparmor.d/groups/whonix/torbrowser-updater-permission-fix | 4 +++- apparmor.d/groups/whonix/torbrowser-vaapitest | 4 +++- apparmor.d/groups/whonix/torbrowser-wrapper | 2 ++ apparmor.d/groups/whonix/whonix-firewall-edit | 2 ++ apparmor.d/groups/whonix/whonix-firewall-restarter | 2 ++ apparmor.d/groups/whonix/whonix-firewalld | 2 ++ apparmor.d/groups/xfce/mousepad | 4 +++- apparmor.d/groups/xfce/ristretto | 4 +++- apparmor.d/groups/xfce/startxfce | 4 +++- apparmor.d/groups/xfce/thunar | 4 +++- apparmor.d/groups/xfce/thunar-volman | 4 +++- apparmor.d/groups/xfce/tumblerd | 4 +++- apparmor.d/groups/xfce/xfce-about | 4 +++- apparmor.d/groups/xfce/xfce-appfinder | 4 +++- apparmor.d/groups/xfce/xfce-clipman-settings | 4 +++- apparmor.d/groups/xfce/xfce-dict | 4 +++- apparmor.d/groups/xfce/xfce-mime-helper | 4 +++- apparmor.d/groups/xfce/xfce-notifyd | 2 ++ apparmor.d/groups/xfce/xfce-panel | 4 +++- apparmor.d/groups/xfce/xfce-power-manager | 4 +++- apparmor.d/groups/xfce/xfce-screensaver | 4 +++- apparmor.d/groups/xfce/xfce-sensors | 4 +++- apparmor.d/groups/xfce/xfce-session | 4 +++- apparmor.d/groups/xfce/xfce-terminal | 4 +++- apparmor.d/groups/xfce/xfconfd | 2 ++ apparmor.d/groups/xfce/xfdesktop | 4 +++- apparmor.d/groups/xfce/xfpm-power-backlight-helper | 4 +++- apparmor.d/groups/xfce/xfsettingsd | 4 +++- apparmor.d/groups/xfce/xfwm | 4 +++- 126 files changed, 348 insertions(+), 96 deletions(-) diff --git a/apparmor.d/groups/ubuntu/apport b/apparmor.d/groups/ubuntu/apport index f24a3627..bc03772b 100644 --- a/apparmor.d/groups/ubuntu/apport +++ b/apparmor.d/groups/ubuntu/apport @@ -53,4 +53,6 @@ profile apport @{exec_path} flags=(attach_disconnected) { owner @{PROC}/@{pid}/fd/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/apport-checkreports b/apparmor.d/groups/ubuntu/apport-checkreports index 96154c84..dec9a5d7 100644 --- a/apparmor.d/groups/ubuntu/apport-checkreports +++ b/apparmor.d/groups/ubuntu/apport-checkreports @@ -29,4 +29,6 @@ profile apport-checkreports @{exec_path} flags=(attach_disconnected) { @{run}/apport.lock rwk, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/apport-gtk b/apparmor.d/groups/ubuntu/apport-gtk index bcbdeb1d..a63f3889 100644 --- a/apparmor.d/groups/ubuntu/apport-gtk +++ b/apparmor.d/groups/ubuntu/apport-gtk @@ -129,3 +129,5 @@ profile apport-gtk @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/apt-esm-hook b/apparmor.d/groups/ubuntu/apt-esm-hook index 2950eb11..c200de4d 100644 --- a/apparmor.d/groups/ubuntu/apt-esm-hook +++ b/apparmor.d/groups/ubuntu/apt-esm-hook @@ -25,4 +25,6 @@ profile apt-esm-hook @{exec_path} { @{PROC}/@{pids}/cmdline r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/apt-esm-json-hook b/apparmor.d/groups/ubuntu/apt-esm-json-hook index f55a68ad..54c11667 100644 --- a/apparmor.d/groups/ubuntu/apt-esm-json-hook +++ b/apparmor.d/groups/ubuntu/apt-esm-json-hook @@ -28,4 +28,6 @@ profile apt-esm-json-hook @{exec_path} { owner @{PROC}/@{pid}/fd/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/check-new-release-gtk b/apparmor.d/groups/ubuntu/check-new-release-gtk index a8364160..a6db303e 100644 --- a/apparmor.d/groups/ubuntu/check-new-release-gtk +++ b/apparmor.d/groups/ubuntu/check-new-release-gtk @@ -58,3 +58,5 @@ profile check-new-release-gtk @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/cron-ubuntu-fan b/apparmor.d/groups/ubuntu/cron-ubuntu-fan index 408d8551..c6658796 100644 --- a/apparmor.d/groups/ubuntu/cron-ubuntu-fan +++ b/apparmor.d/groups/ubuntu/cron-ubuntu-fan @@ -30,4 +30,6 @@ profile cron-ubuntu-fan @{exec_path} { @{run}/ubuntu-fan/.lock rwk, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/do-release-upgrade b/apparmor.d/groups/ubuntu/do-release-upgrade index 9e367725..a2f93f42 100644 --- a/apparmor.d/groups/ubuntu/do-release-upgrade +++ b/apparmor.d/groups/ubuntu/do-release-upgrade @@ -43,4 +43,6 @@ profile do-release-upgrade @{exec_path} { @{PROC}/@{pids}/mountinfo r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/hwe-support-status b/apparmor.d/groups/ubuntu/hwe-support-status index 1842a73b..0752e635 100644 --- a/apparmor.d/groups/ubuntu/hwe-support-status +++ b/apparmor.d/groups/ubuntu/hwe-support-status @@ -22,4 +22,6 @@ profile hwe-support-status @{exec_path} { owner @{PROC}/@{pid}/fd/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/list-oem-metapackages b/apparmor.d/groups/ubuntu/list-oem-metapackages index 95816e68..93059dc3 100644 --- a/apparmor.d/groups/ubuntu/list-oem-metapackages +++ b/apparmor.d/groups/ubuntu/list-oem-metapackages @@ -29,4 +29,6 @@ profile list-oem-metapackages @{exec_path} { @{PROC}/@{pids}/mountinfo r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/livepatch-notification b/apparmor.d/groups/ubuntu/livepatch-notification index 06189146..14f21729 100644 --- a/apparmor.d/groups/ubuntu/livepatch-notification +++ b/apparmor.d/groups/ubuntu/livepatch-notification @@ -26,4 +26,6 @@ profile livepatch-notification @{exec_path} { @{run}/user/@{uid}/gdm/Xauthority r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/notify-reboot-required b/apparmor.d/groups/ubuntu/notify-reboot-required index 83972995..0c7d008e 100644 --- a/apparmor.d/groups/ubuntu/notify-reboot-required +++ b/apparmor.d/groups/ubuntu/notify-reboot-required @@ -23,4 +23,6 @@ profile notify-reboot-required @{exec_path} { @{run}/reboot-required.pkgs rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/notify-updates-outdated b/apparmor.d/groups/ubuntu/notify-updates-outdated index ad1531ce..39ce41c7 100644 --- a/apparmor.d/groups/ubuntu/notify-updates-outdated +++ b/apparmor.d/groups/ubuntu/notify-updates-outdated @@ -17,4 +17,6 @@ profile notify-updates-outdated @{exec_path} { @{bin}/gettext rix, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/package-data-downloader b/apparmor.d/groups/ubuntu/package-data-downloader index c4b9a7fd..bba0add8 100644 --- a/apparmor.d/groups/ubuntu/package-data-downloader +++ b/apparmor.d/groups/ubuntu/package-data-downloader @@ -20,4 +20,6 @@ profile package-data-downloader @{exec_path} { /usr/share/package-data-downloads/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/package-system-locked b/apparmor.d/groups/ubuntu/package-system-locked index 111b2b8c..6876687e 100644 --- a/apparmor.d/groups/ubuntu/package-system-locked +++ b/apparmor.d/groups/ubuntu/package-system-locked @@ -35,4 +35,6 @@ profile package-system-locked @{exec_path} flags=(attach_disconnected) { owner @{PROC}/@{pid}/stat r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/pro b/apparmor.d/groups/ubuntu/pro index dcd19c36..c00b0758 100644 --- a/apparmor.d/groups/ubuntu/pro +++ b/apparmor.d/groups/ubuntu/pro @@ -15,4 +15,6 @@ profile pro @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/release-upgrade-motd b/apparmor.d/groups/ubuntu/release-upgrade-motd index bff7570c..3130f196 100644 --- a/apparmor.d/groups/ubuntu/release-upgrade-motd +++ b/apparmor.d/groups/ubuntu/release-upgrade-motd @@ -26,3 +26,5 @@ profile release-upgrade-motd @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/software-properties-dbus b/apparmor.d/groups/ubuntu/software-properties-dbus index 662645f1..2def932d 100644 --- a/apparmor.d/groups/ubuntu/software-properties-dbus +++ b/apparmor.d/groups/ubuntu/software-properties-dbus @@ -48,3 +48,5 @@ profile software-properties-dbus @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/software-properties-gtk b/apparmor.d/groups/ubuntu/software-properties-gtk index 7d965795..9db3ec33 100644 --- a/apparmor.d/groups/ubuntu/software-properties-gtk +++ b/apparmor.d/groups/ubuntu/software-properties-gtk @@ -96,3 +96,5 @@ profile software-properties-gtk @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/subiquity-console-conf b/apparmor.d/groups/ubuntu/subiquity-console-conf index 6e8e2921..08886b64 100644 --- a/apparmor.d/groups/ubuntu/subiquity-console-conf +++ b/apparmor.d/groups/ubuntu/subiquity-console-conf @@ -113,3 +113,5 @@ profile subiquity-console-conf @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/ubuntu-advantage b/apparmor.d/groups/ubuntu/ubuntu-advantage index 6307745c..bb5f81b8 100644 --- a/apparmor.d/groups/ubuntu/ubuntu-advantage +++ b/apparmor.d/groups/ubuntu/ubuntu-advantage @@ -90,4 +90,6 @@ profile ubuntu-advantage @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/ubuntu-advantage-desktop-daemon b/apparmor.d/groups/ubuntu/ubuntu-advantage-desktop-daemon index 47c67b98..2e35697c 100644 --- a/apparmor.d/groups/ubuntu/ubuntu-advantage-desktop-daemon +++ b/apparmor.d/groups/ubuntu/ubuntu-advantage-desktop-daemon @@ -33,4 +33,6 @@ profile ubuntu-advantage-desktop-daemon @{exec_path} flags=(attach_disconnected) /var/lib/ubuntu-advantage/{,**} r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/ubuntu-advantage-notification b/apparmor.d/groups/ubuntu/ubuntu-advantage-notification index 5c12fc65..2f539bac 100644 --- a/apparmor.d/groups/ubuntu/ubuntu-advantage-notification +++ b/apparmor.d/groups/ubuntu/ubuntu-advantage-notification @@ -24,4 +24,6 @@ profile ubuntu-advantage-notification @{exec_path} { /usr/share/X11/xkb/{,**} r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/ubuntu-distro-info b/apparmor.d/groups/ubuntu/ubuntu-distro-info index 53c0ba87..a444aada 100644 --- a/apparmor.d/groups/ubuntu/ubuntu-distro-info +++ b/apparmor.d/groups/ubuntu/ubuntu-distro-info @@ -15,4 +15,6 @@ profile ubuntu-distro-info @{exec_path} { /usr/share/distro-info/*.csv r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/ubuntu-report b/apparmor.d/groups/ubuntu/ubuntu-report index c29ef321..5edc9ebd 100644 --- a/apparmor.d/groups/ubuntu/ubuntu-report +++ b/apparmor.d/groups/ubuntu/ubuntu-report @@ -26,4 +26,6 @@ profile ubuntu-report @{exec_path} { @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/update-manager b/apparmor.d/groups/ubuntu/update-manager index 5b251715..0ee70c39 100644 --- a/apparmor.d/groups/ubuntu/update-manager +++ b/apparmor.d/groups/ubuntu/update-manager @@ -82,3 +82,5 @@ profile update-manager @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot b/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot index 6850fb01..b0e62994 100644 --- a/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot +++ b/apparmor.d/groups/ubuntu/update-motd-fsck-at-reboot @@ -48,4 +48,6 @@ profile update-motd-fsck-at-reboot @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/update-motd-updates-available b/apparmor.d/groups/ubuntu/update-motd-updates-available index 03665ec0..bf1acfb1 100644 --- a/apparmor.d/groups/ubuntu/update-motd-updates-available +++ b/apparmor.d/groups/ubuntu/update-motd-updates-available @@ -51,4 +51,6 @@ profile update-motd-updates-available @{exec_path} { @{PROC}/@{pids}/mountinfo r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/ubuntu/update-notifier b/apparmor.d/groups/ubuntu/update-notifier index f3ad9f1f..999502db 100644 --- a/apparmor.d/groups/ubuntu/update-notifier +++ b/apparmor.d/groups/ubuntu/update-notifier @@ -102,3 +102,5 @@ profile update-notifier @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-bandwidth b/apparmor.d/groups/virt/cni-bandwidth index fdd6eb28..21914faf 100644 --- a/apparmor.d/groups/virt/cni-bandwidth +++ b/apparmor.d/groups/virt/cni-bandwidth @@ -22,3 +22,5 @@ profile cni-bandwidth @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-bridge b/apparmor.d/groups/virt/cni-bridge index d9d0b114..37de32ae 100644 --- a/apparmor.d/groups/virt/cni-bridge +++ b/apparmor.d/groups/virt/cni-bridge @@ -15,4 +15,6 @@ profile cni-bridge @{exec_path} { @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-calico b/apparmor.d/groups/virt/cni-calico index 3481b9c5..7c39a7ad 100644 --- a/apparmor.d/groups/virt/cni-calico +++ b/apparmor.d/groups/virt/cni-calico @@ -45,3 +45,5 @@ profile cni-calico @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-firewall b/apparmor.d/groups/virt/cni-firewall index a694f21b..866b9dc9 100644 --- a/apparmor.d/groups/virt/cni-firewall +++ b/apparmor.d/groups/virt/cni-firewall @@ -15,4 +15,6 @@ profile cni-firewall @{exec_path} { @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-flannel b/apparmor.d/groups/virt/cni-flannel index 1784dbbf..05929a64 100644 --- a/apparmor.d/groups/virt/cni-flannel +++ b/apparmor.d/groups/virt/cni-flannel @@ -15,4 +15,6 @@ profile cni-flannel @{exec_path} flags=(complain,attach_disconnected){ @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-host-local b/apparmor.d/groups/virt/cni-host-local index 4272115c..bf555cfd 100644 --- a/apparmor.d/groups/virt/cni-host-local +++ b/apparmor.d/groups/virt/cni-host-local @@ -15,4 +15,6 @@ profile cni-host-local @{exec_path} flags=(complain,attach_disconnected){ @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-loopback b/apparmor.d/groups/virt/cni-loopback index bdf7c35c..d05a303d 100644 --- a/apparmor.d/groups/virt/cni-loopback +++ b/apparmor.d/groups/virt/cni-loopback @@ -26,3 +26,5 @@ profile cni-loopback @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-portmap b/apparmor.d/groups/virt/cni-portmap index 2ea714eb..db29f252 100644 --- a/apparmor.d/groups/virt/cni-portmap +++ b/apparmor.d/groups/virt/cni-portmap @@ -23,3 +23,5 @@ profile cni-portmap @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-tuning b/apparmor.d/groups/virt/cni-tuning index 9b610ed9..ee7133b3 100644 --- a/apparmor.d/groups/virt/cni-tuning +++ b/apparmor.d/groups/virt/cni-tuning @@ -15,4 +15,6 @@ profile cni-tuning @{exec_path} { @{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cni-xtables-nft b/apparmor.d/groups/virt/cni-xtables-nft index b8eaddc9..d19f875b 100644 --- a/apparmor.d/groups/virt/cni-xtables-nft +++ b/apparmor.d/groups/virt/cni-xtables-nft @@ -32,3 +32,5 @@ profile cni-xtables-nft { @{PROC}/@{pids}/net/ip_tables_names r, } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-askpass b/apparmor.d/groups/virt/cockpit-askpass index 413a87ee..daa5cf00 100644 --- a/apparmor.d/groups/virt/cockpit-askpass +++ b/apparmor.d/groups/virt/cockpit-askpass @@ -14,4 +14,6 @@ profile cockpit-askpass @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-bridge b/apparmor.d/groups/virt/cockpit-bridge index 4bad61ee..ad3eee9f 100644 --- a/apparmor.d/groups/virt/cockpit-bridge +++ b/apparmor.d/groups/virt/cockpit-bridge @@ -79,4 +79,6 @@ profile cockpit-bridge @{exec_path} { /dev/ptmx rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-certificate-ensure b/apparmor.d/groups/virt/cockpit-certificate-ensure index 2b6fddba..0ef40f4b 100644 --- a/apparmor.d/groups/virt/cockpit-certificate-ensure +++ b/apparmor.d/groups/virt/cockpit-certificate-ensure @@ -23,4 +23,6 @@ profile cockpit-certificate-ensure @{exec_path} flags=(attach_disconnected) { owner @{run}/cockpit/tls/server/{,**} rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-certificate-helper b/apparmor.d/groups/virt/cockpit-certificate-helper index 2979a847..042c9cda 100644 --- a/apparmor.d/groups/virt/cockpit-certificate-helper +++ b/apparmor.d/groups/virt/cockpit-certificate-helper @@ -30,4 +30,6 @@ profile cockpit-certificate-helper @{exec_path} { include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-desktop b/apparmor.d/groups/virt/cockpit-desktop index 6550a0bb..d8e7f81d 100644 --- a/apparmor.d/groups/virt/cockpit-desktop +++ b/apparmor.d/groups/virt/cockpit-desktop @@ -13,4 +13,6 @@ profile cockpit-desktop @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-pcp b/apparmor.d/groups/virt/cockpit-pcp index 473f150d..c1afe3fb 100644 --- a/apparmor.d/groups/virt/cockpit-pcp +++ b/apparmor.d/groups/virt/cockpit-pcp @@ -40,4 +40,6 @@ profile cockpit-pcp @{exec_path} { owner @{PROC}/@{pid}/mounts r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-session b/apparmor.d/groups/virt/cockpit-session index 76ef768c..74ddd9e7 100644 --- a/apparmor.d/groups/virt/cockpit-session +++ b/apparmor.d/groups/virt/cockpit-session @@ -54,3 +54,5 @@ profile cockpit-session @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-ssh b/apparmor.d/groups/virt/cockpit-ssh index dd36990d..2903d9eb 100644 --- a/apparmor.d/groups/virt/cockpit-ssh +++ b/apparmor.d/groups/virt/cockpit-ssh @@ -14,4 +14,6 @@ profile cockpit-ssh @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-tls b/apparmor.d/groups/virt/cockpit-tls index f80c6f8d..f83ac2c7 100644 --- a/apparmor.d/groups/virt/cockpit-tls +++ b/apparmor.d/groups/virt/cockpit-tls @@ -20,4 +20,6 @@ profile cockpit-tls @{exec_path} flags=(attach_disconnected) { owner @{run}/cockpit/tls/{,**} rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-update-motd b/apparmor.d/groups/virt/cockpit-update-motd index 970a0de1..eaf340c6 100644 --- a/apparmor.d/groups/virt/cockpit-update-motd +++ b/apparmor.d/groups/virt/cockpit-update-motd @@ -36,4 +36,6 @@ profile cockpit-update-motd @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-ws b/apparmor.d/groups/virt/cockpit-ws index eb743b38..589765f3 100644 --- a/apparmor.d/groups/virt/cockpit-ws +++ b/apparmor.d/groups/virt/cockpit-ws @@ -22,4 +22,6 @@ profile cockpit-ws @{exec_path} { owner @{PROC}/@{pid}/fd/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/cockpit-wsinstance-factory b/apparmor.d/groups/virt/cockpit-wsinstance-factory index 9f5e897b..61e7e8fa 100644 --- a/apparmor.d/groups/virt/cockpit-wsinstance-factory +++ b/apparmor.d/groups/virt/cockpit-wsinstance-factory @@ -15,4 +15,6 @@ profile cockpit-wsinstance-factory @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/containerd b/apparmor.d/groups/virt/containerd index c9898374..f85a3571 100644 --- a/apparmor.d/groups/virt/containerd +++ b/apparmor.d/groups/virt/containerd @@ -122,3 +122,5 @@ profile containerd @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/containerd-shim-runc-v2 b/apparmor.d/groups/virt/containerd-shim-runc-v2 index 58190db6..c705c0cc 100644 --- a/apparmor.d/groups/virt/containerd-shim-runc-v2 +++ b/apparmor.d/groups/virt/containerd-shim-runc-v2 @@ -58,3 +58,5 @@ profile containerd-shim-runc-v2 @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/docker-proxy b/apparmor.d/groups/virt/docker-proxy index 529ef955..d549168e 100644 --- a/apparmor.d/groups/virt/docker-proxy +++ b/apparmor.d/groups/virt/docker-proxy @@ -25,4 +25,6 @@ profile docker-proxy @{exec_path} { @{PROC}/sys/net/core/somaxconn r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/dockerd b/apparmor.d/groups/virt/dockerd index 47e26a1f..f552c528 100644 --- a/apparmor.d/groups/virt/dockerd +++ b/apparmor.d/groups/virt/dockerd @@ -99,4 +99,6 @@ profile dockerd @{exec_path} flags=(attach_disconnected) { owner @{PROC}/@{pids}/uid_map r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/k3s b/apparmor.d/groups/virt/k3s index 145a095f..5905d489 100644 --- a/apparmor.d/groups/virt/k3s +++ b/apparmor.d/groups/virt/k3s @@ -174,3 +174,5 @@ profile k3s @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/kubernetes-pause b/apparmor.d/groups/virt/kubernetes-pause index b621e63d..8172d00f 100644 --- a/apparmor.d/groups/virt/kubernetes-pause +++ b/apparmor.d/groups/virt/kubernetes-pause @@ -18,3 +18,5 @@ profile kubernetes-pause @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/libvirt-dbus b/apparmor.d/groups/virt/libvirt-dbus index 80337b61..75c7d853 100644 --- a/apparmor.d/groups/virt/libvirt-dbus +++ b/apparmor.d/groups/virt/libvirt-dbus @@ -35,4 +35,6 @@ profile libvirt-dbus @{exec_path} { owner @{PROC}/@{pid}/fd/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/libvirtd b/apparmor.d/groups/virt/libvirtd index 96be2491..376749d9 100644 --- a/apparmor.d/groups/virt/libvirtd +++ b/apparmor.d/groups/virt/libvirtd @@ -294,3 +294,5 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) { include if exists include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virt-aa-helper b/apparmor.d/groups/virt/virt-aa-helper index e784b9cf..abbef1f8 100644 --- a/apparmor.d/groups/virt/virt-aa-helper +++ b/apparmor.d/groups/virt/virt-aa-helper @@ -64,3 +64,5 @@ profile virt-aa-helper @{exec_path} { include if exists include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virtinterfaced b/apparmor.d/groups/virt/virtinterfaced index 918933e5..96d13591 100644 --- a/apparmor.d/groups/virt/virtinterfaced +++ b/apparmor.d/groups/virt/virtinterfaced @@ -40,4 +40,6 @@ profile virtinterfaced @{exec_path} flags=(attach_disconnected) { owner @{PROC}/@{pids}/stat r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virtiofsd b/apparmor.d/groups/virt/virtiofsd index 9c0ecccf..50efd188 100644 --- a/apparmor.d/groups/virt/virtiofsd +++ b/apparmor.d/groups/virt/virtiofsd @@ -62,4 +62,6 @@ profile virtiofsd @{exec_path} { # } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virtlockd b/apparmor.d/groups/virt/virtlockd index e0607711..44c5e20e 100644 --- a/apparmor.d/groups/virt/virtlockd +++ b/apparmor.d/groups/virt/virtlockd @@ -13,4 +13,6 @@ profile virtlockd @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virtlogd b/apparmor.d/groups/virt/virtlogd index e8c0271a..1a3ecb06 100644 --- a/apparmor.d/groups/virt/virtlogd +++ b/apparmor.d/groups/virt/virtlogd @@ -44,3 +44,5 @@ profile virtlogd @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virtnetworkd b/apparmor.d/groups/virt/virtnetworkd index c9849bcb..a2c02368 100644 --- a/apparmor.d/groups/virt/virtnetworkd +++ b/apparmor.d/groups/virt/virtnetworkd @@ -41,4 +41,6 @@ profile virtnetworkd @{exec_path} flags=(attach_disconnected) { owner @{PROC}/@{pids}/fd/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virtnodedevd b/apparmor.d/groups/virt/virtnodedevd index da331675..50b8e488 100644 --- a/apparmor.d/groups/virt/virtnodedevd +++ b/apparmor.d/groups/virt/virtnodedevd @@ -91,4 +91,6 @@ profile virtnodedevd @{exec_path} flags=(attach_disconnected) { owner @{PROC}/mtrr w, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virtsecretd b/apparmor.d/groups/virt/virtsecretd index af18409a..cdded115 100644 --- a/apparmor.d/groups/virt/virtsecretd +++ b/apparmor.d/groups/virt/virtsecretd @@ -34,4 +34,6 @@ profile virtsecretd @{exec_path} flags=(attach_disconnected) { owner @{PROC}/@{pids}/stat r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/virt/virtstoraged b/apparmor.d/groups/virt/virtstoraged index c7e5fb2c..943315a8 100644 --- a/apparmor.d/groups/virt/virtstoraged +++ b/apparmor.d/groups/virt/virtstoraged @@ -64,4 +64,6 @@ profile virtstoraged @{exec_path} flags=(attach_disconnected) { owner @{PROC}/@{pids}/fd/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/anondate b/apparmor.d/groups/whonix/anondate index 179e6c05..cb263922 100644 --- a/apparmor.d/groups/whonix/anondate +++ b/apparmor.d/groups/whonix/anondate @@ -44,4 +44,6 @@ profile anondate @{exec_path} { owner @{run}/sdwdate/* rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/msgcollector b/apparmor.d/groups/whonix/msgcollector index 46036446..0c3038d1 100644 --- a/apparmor.d/groups/whonix/msgcollector +++ b/apparmor.d/groups/whonix/msgcollector @@ -43,4 +43,6 @@ profile msgcollector @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/msgcollector-br-add b/apparmor.d/groups/whonix/msgcollector-br-add index 1e6b624b..be5b7dd6 100644 --- a/apparmor.d/groups/whonix/msgcollector-br-add +++ b/apparmor.d/groups/whonix/msgcollector-br-add @@ -14,4 +14,6 @@ profile msgcollector-br-add @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/msgcollector-generic-gui-message b/apparmor.d/groups/whonix/msgcollector-generic-gui-message index 1ccde074..8b52e2db 100644 --- a/apparmor.d/groups/whonix/msgcollector-generic-gui-message +++ b/apparmor.d/groups/whonix/msgcollector-generic-gui-message @@ -19,4 +19,6 @@ profile msgcollector-generic-gui-message @{exec_path} { @{lib}/msgcollector/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/msgcollector-striphtml b/apparmor.d/groups/whonix/msgcollector-striphtml index dcf6723e..1e4e3d9a 100644 --- a/apparmor.d/groups/whonix/msgcollector-striphtml +++ b/apparmor.d/groups/whonix/msgcollector-striphtml @@ -16,4 +16,6 @@ profile msgcollector-striphtml @{exec_path} { @{lib}/msgcollector/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/msgdispatcher b/apparmor.d/groups/whonix/msgdispatcher index 879ffb3d..02433106 100644 --- a/apparmor.d/groups/whonix/msgdispatcher +++ b/apparmor.d/groups/whonix/msgdispatcher @@ -48,4 +48,6 @@ profile msgdispatcher @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/msgdispatcher-autostart b/apparmor.d/groups/whonix/msgdispatcher-autostart index 86452e89..c4dae811 100644 --- a/apparmor.d/groups/whonix/msgdispatcher-autostart +++ b/apparmor.d/groups/whonix/msgdispatcher-autostart @@ -21,4 +21,6 @@ profile msgdispatcher-autostart @{exec_path} { /dev/tty rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/msgdispatcher-delete b/apparmor.d/groups/whonix/msgdispatcher-delete index 6a2c132b..cf69e77c 100644 --- a/apparmor.d/groups/whonix/msgdispatcher-delete +++ b/apparmor.d/groups/whonix/msgdispatcher-delete @@ -21,4 +21,6 @@ profile msgdispatcher-delete @{exec_path} { @{run}/msgcollector/user/* rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/msgdispatcher-dispatch b/apparmor.d/groups/whonix/msgdispatcher-dispatch index a900ed57..f42280e1 100644 --- a/apparmor.d/groups/whonix/msgdispatcher-dispatch +++ b/apparmor.d/groups/whonix/msgdispatcher-dispatch @@ -16,4 +16,6 @@ profile msgdispatcher-dispatch @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/open-link-confirmation b/apparmor.d/groups/whonix/open-link-confirmation index 65488427..e74d2f26 100644 --- a/apparmor.d/groups/whonix/open-link-confirmation +++ b/apparmor.d/groups/whonix/open-link-confirmation @@ -25,4 +25,6 @@ profile open-link-confirmation @{exec_path} { owner @{HOME}/.xsession-errors rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/pam-abort-on-locked-password b/apparmor.d/groups/whonix/pam-abort-on-locked-password index 958d0bf9..79cb70d2 100644 --- a/apparmor.d/groups/whonix/pam-abort-on-locked-password +++ b/apparmor.d/groups/whonix/pam-abort-on-locked-password @@ -20,4 +20,6 @@ profile pam-abort-on-locked-password @{exec_path} { owner /dev/tty rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/pam-info b/apparmor.d/groups/whonix/pam-info index 15907570..d54cab83 100644 --- a/apparmor.d/groups/whonix/pam-info +++ b/apparmor.d/groups/whonix/pam-info @@ -27,4 +27,6 @@ profile pam-info @{exec_path} { owner /dev/tty rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/pam_faillock_not_if_x b/apparmor.d/groups/whonix/pam_faillock_not_if_x index d85ddabc..c0d05d8a 100644 --- a/apparmor.d/groups/whonix/pam_faillock_not_if_x +++ b/apparmor.d/groups/whonix/pam_faillock_not_if_x @@ -17,4 +17,6 @@ profile pam_faillock_not_if_x @{exec_path} { @{sh_path} rix, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/rads b/apparmor.d/groups/whonix/rads index edcf6b94..fdacd13d 100644 --- a/apparmor.d/groups/whonix/rads +++ b/apparmor.d/groups/whonix/rads @@ -60,4 +60,6 @@ profile rads @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/sdwdate b/apparmor.d/groups/whonix/sdwdate index 247ed766..21b457ac 100644 --- a/apparmor.d/groups/whonix/sdwdate +++ b/apparmor.d/groups/whonix/sdwdate @@ -53,4 +53,6 @@ profile sdwdate @{exec_path} flags=(attach_disconnected) { /dev/tty rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/sdwdate-clock-jump b/apparmor.d/groups/whonix/sdwdate-clock-jump index 1f3e4572..f70da197 100644 --- a/apparmor.d/groups/whonix/sdwdate-clock-jump +++ b/apparmor.d/groups/whonix/sdwdate-clock-jump @@ -26,4 +26,6 @@ profile sdwdate-clock-jump @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/sdwdate-gui b/apparmor.d/groups/whonix/sdwdate-gui index b27126b1..642b14b4 100644 --- a/apparmor.d/groups/whonix/sdwdate-gui +++ b/apparmor.d/groups/whonix/sdwdate-gui @@ -50,4 +50,6 @@ profile sdwdate-gui @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/sdwdate-start b/apparmor.d/groups/whonix/sdwdate-start index 45b8151f..0b952ce1 100644 --- a/apparmor.d/groups/whonix/sdwdate-start +++ b/apparmor.d/groups/whonix/sdwdate-start @@ -30,4 +30,6 @@ profile sdwdate-start @{exec_path} { /dev/tty rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/sdwdate-wrapper b/apparmor.d/groups/whonix/sdwdate-wrapper index 127ff119..fe8390da 100644 --- a/apparmor.d/groups/whonix/sdwdate-wrapper +++ b/apparmor.d/groups/whonix/sdwdate-wrapper @@ -16,4 +16,6 @@ profile sdwdate-wrapper @{exec_path} { @{lib}/sdwdate/sdwdate rPx, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/sensible-browser b/apparmor.d/groups/whonix/sensible-browser index 3bbee878..48e2f0f0 100644 --- a/apparmor.d/groups/whonix/sensible-browser +++ b/apparmor.d/groups/whonix/sensible-browser @@ -27,4 +27,6 @@ profile sensible-browser @{exec_path} { owner @{HOME}/.xsession-errors rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/systemcheck-canary b/apparmor.d/groups/whonix/systemcheck-canary index da9125c1..d46c227f 100644 --- a/apparmor.d/groups/whonix/systemcheck-canary +++ b/apparmor.d/groups/whonix/systemcheck-canary @@ -31,4 +31,6 @@ profile systemcheck-canary @{exec_path} { @{PROC}/cmdline r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/timesanitycheck b/apparmor.d/groups/whonix/timesanitycheck index d17b8ab9..3ca78981 100644 --- a/apparmor.d/groups/whonix/timesanitycheck +++ b/apparmor.d/groups/whonix/timesanitycheck @@ -21,4 +21,6 @@ profile timesanitycheck @{exec_path} { owner /dev/tty rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/tor-bootstrap-check b/apparmor.d/groups/whonix/tor-bootstrap-check index d93f3ee3..0795b0b3 100644 --- a/apparmor.d/groups/whonix/tor-bootstrap-check +++ b/apparmor.d/groups/whonix/tor-bootstrap-check @@ -20,4 +20,6 @@ profile tor-bootstrap-check @{exec_path} { @{run}/tor/control.authcookie r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/tor-consensus-valid-after b/apparmor.d/groups/whonix/tor-consensus-valid-after index 06e2189a..d6656afe 100644 --- a/apparmor.d/groups/whonix/tor-consensus-valid-after +++ b/apparmor.d/groups/whonix/tor-consensus-valid-after @@ -22,4 +22,6 @@ profile tor-consensus-valid-after @{exec_path} { owner /tmp/tmp.@{rand10} rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/torbrowser b/apparmor.d/groups/whonix/torbrowser index 9c438f28..0ec13ed5 100644 --- a/apparmor.d/groups/whonix/torbrowser +++ b/apparmor.d/groups/whonix/torbrowser @@ -69,3 +69,5 @@ profile torbrowser @{exec_path} flags=(attach_disconnected) { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/torbrowser-glxtest b/apparmor.d/groups/whonix/torbrowser-glxtest index 7a7295bf..cbc009db 100644 --- a/apparmor.d/groups/whonix/torbrowser-glxtest +++ b/apparmor.d/groups/whonix/torbrowser-glxtest @@ -28,4 +28,6 @@ profile torbrowser-glxtest @{exec_path} { owner @{PROC}/@{pid}/cmdline r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/torbrowser-plugin-container b/apparmor.d/groups/whonix/torbrowser-plugin-container index 1e8bf50d..9fcb1bd3 100644 --- a/apparmor.d/groups/whonix/torbrowser-plugin-container +++ b/apparmor.d/groups/whonix/torbrowser-plugin-container @@ -23,3 +23,5 @@ profile torbrowser-plugin-container @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/torbrowser-start b/apparmor.d/groups/whonix/torbrowser-start index aa04ab91..266f8e34 100644 --- a/apparmor.d/groups/whonix/torbrowser-start +++ b/apparmor.d/groups/whonix/torbrowser-start @@ -47,3 +47,5 @@ profile torbrowser-start @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/torbrowser-updater b/apparmor.d/groups/whonix/torbrowser-updater index 9db28382..4f0e1682 100644 --- a/apparmor.d/groups/whonix/torbrowser-updater +++ b/apparmor.d/groups/whonix/torbrowser-updater @@ -25,4 +25,6 @@ profile torbrowser-updater @{exec_path} { deny owner @{lib_dirs}/Downloads/** rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/torbrowser-updater-permission-fix b/apparmor.d/groups/whonix/torbrowser-updater-permission-fix index 4dc8e792..39ec37ae 100644 --- a/apparmor.d/groups/whonix/torbrowser-updater-permission-fix +++ b/apparmor.d/groups/whonix/torbrowser-updater-permission-fix @@ -39,4 +39,6 @@ profile torbrowser-updater-permission-fix @{exec_path} { deny @{HOME}/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/torbrowser-vaapitest b/apparmor.d/groups/whonix/torbrowser-vaapitest index 5d284a93..d29d1265 100644 --- a/apparmor.d/groups/whonix/torbrowser-vaapitest +++ b/apparmor.d/groups/whonix/torbrowser-vaapitest @@ -28,4 +28,6 @@ profile torbrowser-vaapitest @{exec_path} { deny @{user_cache_dirs}/startupCache/* r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/torbrowser-wrapper b/apparmor.d/groups/whonix/torbrowser-wrapper index e8e5bf7f..5ae554b4 100644 --- a/apparmor.d/groups/whonix/torbrowser-wrapper +++ b/apparmor.d/groups/whonix/torbrowser-wrapper @@ -75,3 +75,5 @@ profile torbrowser-wrapper @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/whonix-firewall-edit b/apparmor.d/groups/whonix/whonix-firewall-edit index 818f388f..aeea9cf0 100644 --- a/apparmor.d/groups/whonix/whonix-firewall-edit +++ b/apparmor.d/groups/whonix/whonix-firewall-edit @@ -21,3 +21,5 @@ profile whonix-firewall-edit @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/whonix-firewall-restarter b/apparmor.d/groups/whonix/whonix-firewall-restarter index 99a8795d..87a3713d 100644 --- a/apparmor.d/groups/whonix/whonix-firewall-restarter +++ b/apparmor.d/groups/whonix/whonix-firewall-restarter @@ -43,3 +43,5 @@ profile whonix-firewall-restarter @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/whonix/whonix-firewalld b/apparmor.d/groups/whonix/whonix-firewalld index 55183a7a..53b1dba8 100644 --- a/apparmor.d/groups/whonix/whonix-firewalld +++ b/apparmor.d/groups/whonix/whonix-firewalld @@ -47,3 +47,5 @@ profile whonix-firewall @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/mousepad b/apparmor.d/groups/xfce/mousepad index a83e7fa0..1bcd283f 100644 --- a/apparmor.d/groups/xfce/mousepad +++ b/apparmor.d/groups/xfce/mousepad @@ -26,4 +26,6 @@ profile mousepad @{exec_path} { owner @{user_share_dirs}/Mousepad/** rwk, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/ristretto b/apparmor.d/groups/xfce/ristretto index 441972e9..d9151ca8 100644 --- a/apparmor.d/groups/xfce/ristretto +++ b/apparmor.d/groups/xfce/ristretto @@ -30,4 +30,6 @@ profile ristretto @{exec_path} { deny @{user_share_dirs}/gvfs-metadata/* r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/startxfce b/apparmor.d/groups/xfce/startxfce index b1acb5f1..7d8a0165 100644 --- a/apparmor.d/groups/xfce/startxfce +++ b/apparmor.d/groups/xfce/startxfce @@ -45,4 +45,6 @@ profile startxfce @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/thunar b/apparmor.d/groups/xfce/thunar index 21cf4e22..c16365f7 100644 --- a/apparmor.d/groups/xfce/thunar +++ b/apparmor.d/groups/xfce/thunar @@ -62,4 +62,6 @@ profile thunar @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/thunar-volman b/apparmor.d/groups/xfce/thunar-volman index e86c238d..c49f7145 100644 --- a/apparmor.d/groups/xfce/thunar-volman +++ b/apparmor.d/groups/xfce/thunar-volman @@ -26,4 +26,6 @@ profile thunar-volman @{exec_path} { owner @{PROC}/@{pid}/mountinfo r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/tumblerd b/apparmor.d/groups/xfce/tumblerd index 0276fdbe..f85e6d4c 100644 --- a/apparmor.d/groups/xfce/tumblerd +++ b/apparmor.d/groups/xfce/tumblerd @@ -26,4 +26,6 @@ profile tumblerd @{exec_path} { /dev/ r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-about b/apparmor.d/groups/xfce/xfce-about index e7ce66fa..701e9877 100644 --- a/apparmor.d/groups/xfce/xfce-about +++ b/apparmor.d/groups/xfce/xfce-about @@ -18,4 +18,6 @@ profile xfce-about @{exec_path} { @{open_path} rPx -> child-open-help, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-appfinder b/apparmor.d/groups/xfce/xfce-appfinder index ab40b518..c0753acd 100644 --- a/apparmor.d/groups/xfce/xfce-appfinder +++ b/apparmor.d/groups/xfce/xfce-appfinder @@ -21,4 +21,6 @@ profile xfce-appfinder @{exec_path} { owner @{user_cache_dirs}/xfce4/appfinder/{,**} rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-clipman-settings b/apparmor.d/groups/xfce/xfce-clipman-settings index a9da9e62..499980f1 100644 --- a/apparmor.d/groups/xfce/xfce-clipman-settings +++ b/apparmor.d/groups/xfce/xfce-clipman-settings @@ -20,4 +20,6 @@ profile xfce-clipman-settings @{exec_path} { owner @{user_config_dirs}/xfce4/panel/xfce4-clipman-actions.xml rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-dict b/apparmor.d/groups/xfce/xfce-dict index d91131fb..423c09b4 100644 --- a/apparmor.d/groups/xfce/xfce-dict +++ b/apparmor.d/groups/xfce/xfce-dict @@ -18,4 +18,6 @@ profile xfce-dict @{exec_path} { owner @{user_config_dirs}/xfce4-dict/{,**} rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-mime-helper b/apparmor.d/groups/xfce/xfce-mime-helper index e151ddd7..7851cd74 100644 --- a/apparmor.d/groups/xfce/xfce-mime-helper +++ b/apparmor.d/groups/xfce/xfce-mime-helper @@ -14,4 +14,6 @@ profile xfce-mime-helper @{exec_path} { @{exec_path} mr, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-notifyd b/apparmor.d/groups/xfce/xfce-notifyd index 495a559a..06d2b1df 100644 --- a/apparmor.d/groups/xfce/xfce-notifyd +++ b/apparmor.d/groups/xfce/xfce-notifyd @@ -29,3 +29,5 @@ profile xfce-notifyd @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-panel b/apparmor.d/groups/xfce/xfce-panel index 368257d8..0b3530b4 100644 --- a/apparmor.d/groups/xfce/xfce-panel +++ b/apparmor.d/groups/xfce/xfce-panel @@ -52,4 +52,6 @@ profile xfce-panel @{exec_path} { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-power-manager b/apparmor.d/groups/xfce/xfce-power-manager index 0dce5ee1..d286280f 100644 --- a/apparmor.d/groups/xfce/xfce-power-manager +++ b/apparmor.d/groups/xfce/xfce-power-manager @@ -24,4 +24,6 @@ profile xfce-power-manager @{exec_path} flags=(attach_disconnected) { @{run}/systemd/inhibit/*.ref rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-screensaver b/apparmor.d/groups/xfce/xfce-screensaver index 3f6724d0..e441b84b 100644 --- a/apparmor.d/groups/xfce/xfce-screensaver +++ b/apparmor.d/groups/xfce/xfce-screensaver @@ -28,4 +28,6 @@ profile xfce-screensaver @{exec_path} flags=(attach_disconnected) { @{run}/systemd/inhibit/*.ref rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-sensors b/apparmor.d/groups/xfce/xfce-sensors index 963a69f3..c2eb97c3 100644 --- a/apparmor.d/groups/xfce/xfce-sensors +++ b/apparmor.d/groups/xfce/xfce-sensors @@ -29,4 +29,6 @@ profile xfce-sensors @{exec_path} { @{sys}/devices/virtual/thermal/thermal_zone@{int}/temp r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-session b/apparmor.d/groups/xfce/xfce-session index a4278aa3..f2b14b31 100644 --- a/apparmor.d/groups/xfce/xfce-session +++ b/apparmor.d/groups/xfce/xfce-session @@ -74,4 +74,6 @@ profile xfce-session @{exec_path} flags=(attach_disconnected) { } include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfce-terminal b/apparmor.d/groups/xfce/xfce-terminal index 92d8d083..88a042da 100644 --- a/apparmor.d/groups/xfce/xfce-terminal +++ b/apparmor.d/groups/xfce/xfce-terminal @@ -44,4 +44,6 @@ profile xfce-terminal @{exec_path} { /dev/ptmx rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfconfd b/apparmor.d/groups/xfce/xfconfd index 9f930771..34585127 100644 --- a/apparmor.d/groups/xfce/xfconfd +++ b/apparmor.d/groups/xfce/xfconfd @@ -25,3 +25,5 @@ profile xfconfd @{exec_path} { include if exists } + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfdesktop b/apparmor.d/groups/xfce/xfdesktop index 703fe593..c01a057e 100644 --- a/apparmor.d/groups/xfce/xfdesktop +++ b/apparmor.d/groups/xfce/xfdesktop @@ -32,4 +32,6 @@ profile xfdesktop @{exec_path} { deny @{user_share_dirs}/gvfs-metadata/{,*} r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfpm-power-backlight-helper b/apparmor.d/groups/xfce/xfpm-power-backlight-helper index 0a626c5d..a00ebb09 100644 --- a/apparmor.d/groups/xfce/xfpm-power-backlight-helper +++ b/apparmor.d/groups/xfce/xfpm-power-backlight-helper @@ -25,4 +25,6 @@ profile xfpm-power-backlight-helper @{exec_path} { @{sys}/devices/@{pci}/intel_backlight/type r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfsettingsd b/apparmor.d/groups/xfce/xfsettingsd index f2e61e20..ec46f544 100644 --- a/apparmor.d/groups/xfce/xfsettingsd +++ b/apparmor.d/groups/xfce/xfsettingsd @@ -19,4 +19,6 @@ profile xfsettingsd @{exec_path} { owner @{PROC}/@{pid}/cgroup r, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor diff --git a/apparmor.d/groups/xfce/xfwm b/apparmor.d/groups/xfce/xfwm index 6a55af7d..27bb23bf 100644 --- a/apparmor.d/groups/xfce/xfwm +++ b/apparmor.d/groups/xfce/xfwm @@ -24,4 +24,6 @@ profile xfwm @{exec_path} { owner @{user_cache_dirs}/sessions/xfwm4-*.state rw, include if exists -} \ No newline at end of file +} + +# vim:syntax=apparmor