mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profiles): add support for distribution that use /usr/libexec.

Browse Source
This commit is contained in:
Alexandre Pujol 2022-05-07 11:35:21 +01:00
parent 7377aed016
commit 6aadd82293
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
57 changed files with 75 additions and 62 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apparmor.d/groups/bus/dbus-run-session
View File

@ -19,7 +19,7 @@ profile dbus-run-session @{exec_path} {
/{usr/,}bin/dbus-daemon rPx,
/{usr/,}bin/gnome-session rix,
/{usr/,}bin/gsettings rix,
/{usr/,}lib/gnome-session-binary rPx,
@{libexec}/gnome-session-binary rPx,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/gdm/greeter-dconf-defaults r,

1
apparmor.d/groups/bus/ibus-dconf
View File

@ -7,6 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-dconf
@{exec_path} += @{libexec}/ibus-dconf
profile ibus-dconf @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>

1
apparmor.d/groups/bus/ibus-engine-simple
View File

@ -7,6 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-engine-simple
@{exec_path} += @{libexec}/ibus-engine-simple
profile ibus-engine-simple @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>

3
apparmor.d/groups/bus/ibus-extension-gtk3
View File

@ -6,7 +6,8 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-extension-gtk3
@{exec_path} = /{usr/,}lib/ibus/ibus-extension-gtk3
@{exec_path} += @{libexec}/ibus-extension-gtk3
profile ibus-extension-gtk3 @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

1
apparmor.d/groups/bus/ibus-portal
View File

@ -7,6 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-portal
@{exec_path} += @{libexec}/ibus-portal
profile ibus-portal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>

1
apparmor.d/groups/bus/ibus-x11
View File

@ -7,6 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/ibus/ibus-x11
@{exec_path} += @{libexec}/ibus-x11
profile ibus-x11 @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dri-common>

3
apparmor.d/groups/desktop/colord
View File

@ -7,7 +7,8 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/colord/colord /usr/lib/colord
@{exec_path} = /{usr/,}lib/colord/colord
@{exec_path} += @{libexec}/colord
profile colord @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>

2
apparmor.d/groups/desktop/geoclue
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/geoclue
@{exec_path} = @{libexec}/geoclue
profile geoclue @{exec_path} {
include <abstractions/base>

3
apparmor.d/groups/gnome/evolution-addressbook-factory
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/evolution-addressbook-factory
@{exec_path} = @{libexec}/evolution-addressbook-factory
profile evolution-addressbook-factory @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>
@ -22,6 +22,7 @@ profile evolution-addressbook-factory @{exec_path} {
@{exec_path} mr,
@{exec_path}-subprocess rix,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{user_share_dirs}/evolution/{,**} rwk,

2
apparmor.d/groups/gnome/evolution-alarm-notify
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/evolution-data-server/evolution-alarm-notify
@{exec_path} = @{libexec}/evolution-data-server/evolution-alarm-notify
profile evolution-alarm-notify @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

3
apparmor.d/groups/gnome/evolution-calendar-factory
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/evolution-calendar-factory
@{exec_path} = @{libexec}/evolution-calendar-factory
profile evolution-calendar-factory @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>
@ -22,6 +22,7 @@ profile evolution-calendar-factory @{exec_path} {
@{exec_path} mr,
@{exec_path}-subprocess rix,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{user_share_dirs}/evolution/calendar/{,**} rwk,

3
apparmor.d/groups/gnome/evolution-source-registry
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/evolution-source-registry
@{exec_path} = @{libexec}/evolution-source-registry
profile evolution-source-registry @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>
@ -21,6 +21,7 @@ profile evolution-source-registry @{exec_path} {
network netlink raw,
@{exec_path} mr,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{user_config_dirs}/evolution/sources/{,*} rw,

2
apparmor.d/groups/gnome/gdm
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/gdm
@{exec_path} = /{usr/,}{s,}bin/gdm{,3}
profile gdm @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/wutmp>

2
apparmor.d/groups/gnome/gdm-runtime-config
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gdm-runtime-config
@{exec_path} = @{libexec}/gdm-runtime-config
profile gdm-runtime-config @{exec_path} {
include <abstractions/base>

6
apparmor.d/groups/gnome/gdm-session-worker
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gdm-session-worker
@{exec_path} = @{libexec}/gdm-session-worker
profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/authentication>
@ -42,8 +42,8 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
@{exec_path} mrix,
/{usr/,}bin/gnome-keyring-daemon rPx,
/{usr/,}lib/gdm-wayland-session rPx,
/{usr/,}lib/gdm-x-session rPx,
@{libexec}/gdm-wayland-session rPx,
@{libexec}/gdm-x-session rPx,
/etc/gdm/{Pre,Post}Session/Default rix,
/etc/environment r,

4
apparmor.d/groups/gnome/gdm-wayland-session
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gdm-wayland-session
@{exec_path} = @{libexec}/gdm-wayland-session
profile gdm-wayland-session @{exec_path} {
include <abstractions/base>
include <abstractions/bash>
@ -32,7 +32,7 @@ profile gdm-wayland-session @{exec_path} {
/{usr/,}bin/dbus-daemon rPx,
/{usr/,}bin/dbus-run-session rPx,
/{usr/,}bin/flatpak rPUx,
/{usr/,}lib/gnome-session-binary rPx,
@{libexec}/gnome-session-binary rPx,
/etc/gdm/custom.conf r,
/etc/machine-id r,

2
apparmor.d/groups/gnome/gdm-x-session
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gdm-x-session
@{exec_path} = @{libexec}/gdm-x-session
profile gdm-x-session @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>

2
apparmor.d/groups/gnome/gdm-xsession
View File

@ -29,7 +29,7 @@ profile gdm-xsession @{exec_path} {
/{usr/,}bin/systemctl rPx -> child-systemctl,
/{usr/,}bin/xbrlapi rPx,
/{usr/,}bin/xhost rPx,
/{usr/,}lib/gnome-session-binary rPx,
@{libexec}/gnome-session-binary rPx,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/etc/X11/{,**} r,

2
apparmor.d/groups/gnome/gnome-calculator-search-provider
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-calculator-search-provider
@{exec_path} = @{libexec}/gnome-calculator-search-provider
profile gnome-calculator-search-provider @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gnome-control-center-print-renderer
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-control-center-print-renderer
@{exec_path} = @{libexec}/gnome-control-center-print-renderer
profile gnome-control-center-print-renderer @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gnome-control-center-search-provider
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-control-center-search-provider
@{exec_path} = @{libexec}/gnome-control-center-search-provider
profile gnome-control-center-search-provider @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

16
apparmor.d/groups/gnome/gnome-session-binary
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-session-binary
@{exec_path} = @{libexec}/gnome-session-binary
profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>
@ -34,11 +34,11 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/touch rix,
/{usr/,}bin/gsettings rix,
/{usr/,}bin/xdg-user-dirs-gtk-update rix,
/{usr/,}lib/gnome-session-check-accelerated rix,
/{usr/,}lib/gnome-session-check-accelerated-gl-helper rix,
/{usr/,}lib/gnome-session-check-accelerated-gles-helper rix,
/{usr/,}lib/gnome-session-failed rix,
/{usr/,}lib/gnome-shell-overrides-migration.sh rix,
@{libexec}/gnome-session-check-accelerated rix,
@{libexec}/gnome-session-check-accelerated-gl-helper rix,
@{libexec}/gnome-session-check-accelerated-gles-helper rix,
@{libexec}/gnome-session-failed rix,
@{libexec}/gnome-shell-overrides-migration.sh rix,
/{usr/,}bin/aa-notify rPx,
/{usr/,}bin/blueman-applet rPx,
@ -48,8 +48,8 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/pkcs11-register rPx,
/{usr/,}bin/start-pulseaudio-x11 rPx,
/{usr/,}bin/xbrlapi rPx,
/{usr/,}lib/evolution-data-server/evolution-alarm-notify rPx,
/{usr/,}lib/gsd-* rPx,
@{libexec}/evolution-data-server/evolution-alarm-notify rPx,
@{libexec}/gsd-* rPx,
/usr/share/applications//{,**} r,
/usr/share/gdm/greeter-dconf-defaults r,

2
apparmor.d/groups/gnome/gnome-session-ctl
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-session-ctl
@{exec_path} = @{libexec}/gnome-session-ctl
profile gnome-session-ctl @{exec_path} {
include <abstractions/base>

2
apparmor.d/groups/gnome/gnome-shell-calendar-server
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-shell-calendar-server
@{exec_path} = @{libexec}/gnome-shell-calendar-server
profile gnome-shell-calendar-server @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gnome-shell-hotplug-sniffer
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-shell-hotplug-sniffer
@{exec_path} = @{libexec}/gnome-shell-hotplug-sniffer
profile gnome-shell-hotplug-sniffer @{exec_path} {
include <abstractions/base>

2
apparmor.d/groups/gnome/gnome-terminal-server
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gnome-terminal-server
@{exec_path} = @{libexec}/gnome-terminal-server
profile gnome-terminal-server @{exec_path} {
include <abstractions/base>
include <abstractions/consoles>

2
apparmor.d/groups/gnome/goa-daemon
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/goa-daemon
@{exec_path} = @{libexec}/goa-daemon
profile goa-daemon @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/goa-identity-service
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/goa-identity-service
@{exec_path} = @{libexec}/goa-identity-service
profile goa-identity-service @{exec_path} {
include <abstractions/base>
include <abstractions/authentication>

2
apparmor.d/groups/gnome/gsd-a11y-settings
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-a11y-settings
@{exec_path} = @{libexec}/gsd-a11y-settings
profile gsd-a11y-settings @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gsd-color
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-color
@{exec_path} = @{libexec}/gsd-color
profile gsd-color @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gsd-datetime
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-datetime
@{exec_path} = @{libexec}/gsd-datetime
profile gsd-datetime @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gsd-disk-utility-notify
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-disk-utility-notify
@{exec_path} = @{libexec}/gsd-disk-utility-notify
profile gsd-disk-utility-notify @{exec_path} {
include <abstractions/base>

2
apparmor.d/groups/gnome/gsd-housekeeping
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-housekeeping
@{exec_path} = @{libexec}/gsd-housekeeping
profile gsd-housekeeping @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/app-launcher-user>

2
apparmor.d/groups/gnome/gsd-keyboard
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-keyboard
@{exec_path} = @{libexec}/gsd-keyboard
profile gsd-keyboard @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gsd-media-keys
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-media-keys
@{exec_path} = @{libexec}/gsd-media-keys
profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio>

2
apparmor.d/groups/gnome/gsd-power
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-power
@{exec_path} = @{libexec}/gsd-power
profile gsd-power @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio>

4
apparmor.d/groups/gnome/gsd-print-notifications
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-print-notifications
@{exec_path} = @{libexec}/gsd-print-notifications
profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>
@ -18,7 +18,7 @@ profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
signal (send) set=(hup) peer=gsd-printer,
@{exec_path} mr,
/{usr/,}lib/gsd-printer rPx,
@{libexec}/gsd-printer rPx,
/etc/machine-id r,

2
apparmor.d/groups/gnome/gsd-printer
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-printer
@{exec_path} = @{libexec}/gsd-printer
profile gsd-printer @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>

2
apparmor.d/groups/gnome/gsd-rfkill
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-rfkill
@{exec_path} = @{libexec}/gsd-rfkill
profile gsd-rfkill @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>

2
apparmor.d/groups/gnome/gsd-screensaver-proxy
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-screensaver-proxy
@{exec_path} = @{libexec}/gsd-screensaver-proxy
profile gsd-screensaver-proxy @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>

2
apparmor.d/groups/gnome/gsd-sharing
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-sharing
@{exec_path} = @{libexec}/gsd-sharing
profile gsd-sharing @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gsd-smartcard
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-smartcard
@{exec_path} = @{libexec}/gsd-smartcard
profile gsd-smartcard @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gsd-sound
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-sound
@{exec_path} = @{libexec}/gsd-sound
profile gsd-sound @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/audio>

2
apparmor.d/groups/gnome/gsd-usb-protection
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-usb-protection
@{exec_path} = @{libexec}/gsd-usb-protection
profile gsd-usb-protection @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gsd-wacom
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-wacom
@{exec_path} = @{libexec}/gsd-wacom
profile gsd-wacom @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/gsd-xsettings
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/gsd-xsettings
@{exec_path} = @{libexec}/gsd-xsettings
profile gsd-xsettings @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/tracker-extract
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/tracker-extract-3
@{exec_path} = @{libexec}/tracker-extract-3
profile tracker-extract @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/groups/gnome/tracker-miner
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/tracker-miner-fs-{,control-}3
@{exec_path} = @{libexec}/tracker-miner-fs-{,control-}3
profile tracker-miner @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>

2
apparmor.d/profiles-g-l/glib-pacrunner
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/glib-pacrunner
@{exec_path} = @{libexec}/glib-pacrunner
profile glib-pacrunner @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>

1
apparmor.d/profiles-m-r/polkit-agent-helper
View File

@ -8,6 +8,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/polkit-[0-9]/polkit-agent-helper-[0-9]
@{exec_path} += @{libexec}/polkit-agent-helper-[0-9]
profile polkit-agent-helper @{exec_path} {
include <abstractions/base>
include <abstractions/authentication>

1
apparmor.d/profiles-m-r/polkitd
View File

@ -8,6 +8,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/polkit-1/polkitd
@{exec_path} += @{libexec}/polkitd
profile polkitd @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>

4
apparmor.d/profiles-m-r/power-profiles-daemon
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/power-profiles-daemon
@{exec_path} = @{libexec}/power-profiles-daemon
profile power-profiles-daemon @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
@ -25,8 +25,10 @@ profile power-profiles-daemon @{exec_path} {
@{sys}/class/power_supply/ r,
@{sys}/devices/**/power_supply/*/uevent r,
@{sys}/devices/system/cpu/*_pstate/{no_turbo,turbo_pct} r,
@{sys}/devices/system/cpu/*_pstate/status r,
@{sys}/devices/system/cpu/cpufreq/ r,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/energy_performance_preference rw,
@{sys}/devices/system/cpu/cpufreq/policy[0-9]*/scaling_governor rw,
include if exists <local/power-profiles-daemon>
}

2
apparmor.d/profiles-s-z/xdg-desktop-portal
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/xdg-desktop-portal
@{exec_path} = @{libexec}/xdg-desktop-portal
profile xdg-desktop-portal @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/nameservice-strict>

2
apparmor.d/profiles-s-z/xdg-desktop-portal-gnome
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/xdg-desktop-portal-gnome
@{exec_path} = @{libexec}/xdg-desktop-portal-gnome
profile xdg-desktop-portal-gnome @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>

2
apparmor.d/profiles-s-z/xdg-desktop-portal-gtk
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/xdg-desktop-portal-gtk
@{exec_path} = @{libexec}/xdg-desktop-portal-gtk
profile xdg-desktop-portal-gtk @{exec_path} {
include <abstractions/base>
include <abstractions/fontconfig-cache-write>

2
apparmor.d/profiles-s-z/xdg-document-portal
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/xdg-document-portal
@{exec_path} = @{libexec}/xdg-document-portal
profile xdg-document-portal @{exec_path} {
include <abstractions/base>

2
apparmor.d/profiles-s-z/xdg-permission-store
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}lib/xdg-permission-store
@{exec_path} = @{libexec}/xdg-permission-store
profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>