mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix support for Qt5CT and Qt6CT in kde groups profiles

Browse source 
This fix support in this apps/binaries

*kio_http
*kiod
*kscreenlocker
*kwalletd
*kwalletmanager
*kwin_wayland
*sddm-greeter
This commit is contained in:
Jose Maldonado aka Yukiteru 2024-04-25 22:33:12 -04:00 committed by Alex
parent 7ba5adc6f2
commit 72784f4cbc
7 changed files with 1 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/kde/kio_http_cache_cleaner
View file

@ -10,11 +10,11 @@ include <tunables/global>
@{exec_path} += @{lib}/@{multiarch}/{,libexec/}kf{5,6}/kio_http_cache_cleaner
profile kio_http_cache_cleaner @{exec_path} {
include <abstractions/base>
include <abstractions/qt5>
@{exec_path} mr,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/qt{5,}/translations/*.qm r,
owner @{user_cache_dirs}/kio_http/{,*} rw,
owner @{user_config_dirs}/kio_httprc r,

1
apparmor.d/groups/kde/kiod
View file

@ -20,7 +20,6 @@ profile kiod @{exec_path} {
/usr/share/icons/breeze/index.theme r,
/usr/share/mime/{,**} r,
/usr/share/qt/translations/*.qm r,
owner @{user_cache_dirs}/icon-cache.kcache rw,

2
apparmor.d/groups/kde/kscreenlocker_greet
View file

@ -45,8 +45,6 @@ profile kscreenlocker_greet @{exec_path} {
@{lib}/@{multiarch}/libexec/kcheckpass rPx,
/usr/share/plasma/** r,
/usr/share/qt/translations/*.qm r,
/usr/share/qt5ct/** r,
/usr/share/wallpapers/{,**} r,
/usr/share/wallpapers/Path/contents/images/*.{jpg,png} r,
/usr/share/wayland-sessions/{,*.desktop} r,

4
apparmor.d/groups/kde/kwalletd
View file

@ -26,9 +26,6 @@ profile kwalletd @{exec_path} {
@{bin}/gpgsm rCx -> gpg,
/usr/share/color-schemes/{,**} r,
/usr/share/qt/translations/*.qm r,
/usr/share/qt{5,6}/qtlogging.ini r,
/usr/share/qt5ct/** r,
/etc/machine-id r,
/var/lib/dbus/machine-id r,
@ -40,7 +37,6 @@ profile kwalletd @{exec_path} {
owner @{user_config_dirs}/kwalletrc r,
owner @{user_config_dirs}/kwalletrc rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/kwalletrc.lock rwk,
owner @{user_config_dirs}/qt5ct/{,**} r,
owner @{user_share_dirs}/kwalletd/ rw,
owner @{user_share_dirs}/kwalletd/** rwkl -> @{user_share_dirs}/kwalletd/#@{int},

2
apparmor.d/groups/kde/kwalletmanager
View file

@ -23,7 +23,6 @@ profile kwalletmanager @{exec_path} {
@{exec_path} mr,
/usr/share/kxmlgui5/kwalletmanager5/kwalletmanager.rc r,
/usr/share/qt5ct/** r,
/etc/fstab r,
/etc/machine-id r,
@ -32,7 +31,6 @@ profile kwalletmanager @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/#@{int} rw,
owner @{user_config_dirs}/qt5ct/{,**} r,
owner @{user_config_dirs}/kwalletmanager5rc rw,
owner @{user_config_dirs}/kwalletmanager5rc.* rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/kwalletmanager5rc.lock rwk,

1
apparmor.d/groups/kde/kwin_wayland
View file

@ -42,7 +42,6 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
/usr/share/libinput/{,**} r,
/usr/share/pipewire/client.conf r,
/usr/share/plasma/desktoptheme/** r,
/usr/share/qt/translations/*.qm r,
/etc/pipewire/client.conf.d/ r,
/etc/xdg/kscreenlockerrc r,

2
apparmor.d/groups/kde/sddm-greeter
View file

@ -30,7 +30,6 @@ profile sddm-greeter @{exec_path} {
/usr/share/desktop-base/*-theme/login/*.svg r,
/usr/share/plasma/desktoptheme/** r,
/usr/share/qt5ct/** r,
/usr/share/sddm/{,**} r,
/usr/share/wayland-sessions/{,*.desktop} r,
/usr/share/xsessions/{,*.desktop} r,
@ -58,7 +57,6 @@ profile sddm-greeter @{exec_path} {
owner @{user_cache_dirs}/sddm-greeter/{,**} rwl,
owner @{user_config_dirs}/plasmarc r,
owner @{user_config_dirs}/qt5ct/{,**} r,
# If one is blocked, the others are probed.
deny owner @{HOME}/#@{int} mrw,