mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-31 07:17:22 +01:00
Fix support for Qt5CT and Qt6CT in kde groups profiles
This fix support in this apps/binaries *kio_http *kiod *kscreenlocker *kwalletd *kwalletmanager *kwin_wayland *sddm-greeter
This commit is contained in:
parent
7ba5adc6f2
commit
72784f4cbc
7 changed files with 1 additions and 13 deletions
|
@ -10,11 +10,11 @@ include <tunables/global>
|
||||||
@{exec_path} += @{lib}/@{multiarch}/{,libexec/}kf{5,6}/kio_http_cache_cleaner
|
@{exec_path} += @{lib}/@{multiarch}/{,libexec/}kf{5,6}/kio_http_cache_cleaner
|
||||||
profile kio_http_cache_cleaner @{exec_path} {
|
profile kio_http_cache_cleaner @{exec_path} {
|
||||||
include <abstractions/base>
|
include <abstractions/base>
|
||||||
|
include <abstractions/qt5>
|
||||||
|
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
/usr/share/icu/@{int}.@{int}/*.dat r,
|
/usr/share/icu/@{int}.@{int}/*.dat r,
|
||||||
/usr/share/qt{5,}/translations/*.qm r,
|
|
||||||
|
|
||||||
owner @{user_cache_dirs}/kio_http/{,*} rw,
|
owner @{user_cache_dirs}/kio_http/{,*} rw,
|
||||||
owner @{user_config_dirs}/kio_httprc r,
|
owner @{user_config_dirs}/kio_httprc r,
|
||||||
|
|
|
@ -20,7 +20,6 @@ profile kiod @{exec_path} {
|
||||||
|
|
||||||
/usr/share/icons/breeze/index.theme r,
|
/usr/share/icons/breeze/index.theme r,
|
||||||
/usr/share/mime/{,**} r,
|
/usr/share/mime/{,**} r,
|
||||||
/usr/share/qt/translations/*.qm r,
|
|
||||||
|
|
||||||
owner @{user_cache_dirs}/icon-cache.kcache rw,
|
owner @{user_cache_dirs}/icon-cache.kcache rw,
|
||||||
|
|
||||||
|
|
|
@ -45,8 +45,6 @@ profile kscreenlocker_greet @{exec_path} {
|
||||||
@{lib}/@{multiarch}/libexec/kcheckpass rPx,
|
@{lib}/@{multiarch}/libexec/kcheckpass rPx,
|
||||||
|
|
||||||
/usr/share/plasma/** r,
|
/usr/share/plasma/** r,
|
||||||
/usr/share/qt/translations/*.qm r,
|
|
||||||
/usr/share/qt5ct/** r,
|
|
||||||
/usr/share/wallpapers/{,**} r,
|
/usr/share/wallpapers/{,**} r,
|
||||||
/usr/share/wallpapers/Path/contents/images/*.{jpg,png} r,
|
/usr/share/wallpapers/Path/contents/images/*.{jpg,png} r,
|
||||||
/usr/share/wayland-sessions/{,*.desktop} r,
|
/usr/share/wayland-sessions/{,*.desktop} r,
|
||||||
|
|
|
@ -26,9 +26,6 @@ profile kwalletd @{exec_path} {
|
||||||
@{bin}/gpgsm rCx -> gpg,
|
@{bin}/gpgsm rCx -> gpg,
|
||||||
|
|
||||||
/usr/share/color-schemes/{,**} r,
|
/usr/share/color-schemes/{,**} r,
|
||||||
/usr/share/qt/translations/*.qm r,
|
|
||||||
/usr/share/qt{5,6}/qtlogging.ini r,
|
|
||||||
/usr/share/qt5ct/** r,
|
|
||||||
|
|
||||||
/etc/machine-id r,
|
/etc/machine-id r,
|
||||||
/var/lib/dbus/machine-id r,
|
/var/lib/dbus/machine-id r,
|
||||||
|
@ -40,7 +37,6 @@ profile kwalletd @{exec_path} {
|
||||||
owner @{user_config_dirs}/kwalletrc r,
|
owner @{user_config_dirs}/kwalletrc r,
|
||||||
owner @{user_config_dirs}/kwalletrc rwl -> @{user_config_dirs}/#@{int},
|
owner @{user_config_dirs}/kwalletrc rwl -> @{user_config_dirs}/#@{int},
|
||||||
owner @{user_config_dirs}/kwalletrc.lock rwk,
|
owner @{user_config_dirs}/kwalletrc.lock rwk,
|
||||||
owner @{user_config_dirs}/qt5ct/{,**} r,
|
|
||||||
|
|
||||||
owner @{user_share_dirs}/kwalletd/ rw,
|
owner @{user_share_dirs}/kwalletd/ rw,
|
||||||
owner @{user_share_dirs}/kwalletd/** rwkl -> @{user_share_dirs}/kwalletd/#@{int},
|
owner @{user_share_dirs}/kwalletd/** rwkl -> @{user_share_dirs}/kwalletd/#@{int},
|
||||||
|
|
|
@ -23,7 +23,6 @@ profile kwalletmanager @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
/usr/share/kxmlgui5/kwalletmanager5/kwalletmanager.rc r,
|
/usr/share/kxmlgui5/kwalletmanager5/kwalletmanager.rc r,
|
||||||
/usr/share/qt5ct/** r,
|
|
||||||
|
|
||||||
/etc/fstab r,
|
/etc/fstab r,
|
||||||
/etc/machine-id r,
|
/etc/machine-id r,
|
||||||
|
@ -32,7 +31,6 @@ profile kwalletmanager @{exec_path} {
|
||||||
|
|
||||||
owner @{user_cache_dirs}/icon-cache.kcache rw,
|
owner @{user_cache_dirs}/icon-cache.kcache rw,
|
||||||
owner @{user_config_dirs}/#@{int} rw,
|
owner @{user_config_dirs}/#@{int} rw,
|
||||||
owner @{user_config_dirs}/qt5ct/{,**} r,
|
|
||||||
owner @{user_config_dirs}/kwalletmanager5rc rw,
|
owner @{user_config_dirs}/kwalletmanager5rc rw,
|
||||||
owner @{user_config_dirs}/kwalletmanager5rc.* rwl -> @{user_config_dirs}/#@{int},
|
owner @{user_config_dirs}/kwalletmanager5rc.* rwl -> @{user_config_dirs}/#@{int},
|
||||||
owner @{user_config_dirs}/kwalletmanager5rc.lock rwk,
|
owner @{user_config_dirs}/kwalletmanager5rc.lock rwk,
|
||||||
|
|
|
@ -42,7 +42,6 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
|
||||||
/usr/share/libinput/{,**} r,
|
/usr/share/libinput/{,**} r,
|
||||||
/usr/share/pipewire/client.conf r,
|
/usr/share/pipewire/client.conf r,
|
||||||
/usr/share/plasma/desktoptheme/** r,
|
/usr/share/plasma/desktoptheme/** r,
|
||||||
/usr/share/qt/translations/*.qm r,
|
|
||||||
|
|
||||||
/etc/pipewire/client.conf.d/ r,
|
/etc/pipewire/client.conf.d/ r,
|
||||||
/etc/xdg/kscreenlockerrc r,
|
/etc/xdg/kscreenlockerrc r,
|
||||||
|
|
|
@ -30,7 +30,6 @@ profile sddm-greeter @{exec_path} {
|
||||||
|
|
||||||
/usr/share/desktop-base/*-theme/login/*.svg r,
|
/usr/share/desktop-base/*-theme/login/*.svg r,
|
||||||
/usr/share/plasma/desktoptheme/** r,
|
/usr/share/plasma/desktoptheme/** r,
|
||||||
/usr/share/qt5ct/** r,
|
|
||||||
/usr/share/sddm/{,**} r,
|
/usr/share/sddm/{,**} r,
|
||||||
/usr/share/wayland-sessions/{,*.desktop} r,
|
/usr/share/wayland-sessions/{,*.desktop} r,
|
||||||
/usr/share/xsessions/{,*.desktop} r,
|
/usr/share/xsessions/{,*.desktop} r,
|
||||||
|
@ -58,7 +57,6 @@ profile sddm-greeter @{exec_path} {
|
||||||
owner @{user_cache_dirs}/sddm-greeter/{,**} rwl,
|
owner @{user_cache_dirs}/sddm-greeter/{,**} rwl,
|
||||||
|
|
||||||
owner @{user_config_dirs}/plasmarc r,
|
owner @{user_config_dirs}/plasmarc r,
|
||||||
owner @{user_config_dirs}/qt5ct/{,**} r,
|
|
||||||
|
|
||||||
# If one is blocked, the others are probed.
|
# If one is blocked, the others are probed.
|
||||||
deny owner @{HOME}/#@{int} mrw,
|
deny owner @{HOME}/#@{int} mrw,
|
||||||
|
|
Loading…
Reference in a new issue