mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): improve xfce related profiles

Browse Source
This commit is contained in:
Alexandre Pujol 2024-04-05 11:54:59 +01:00
parent 2c192dfab1
commit 7603ac33d0
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
2 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
apparmor.d/groups/xfce/xfce-notifyd
View File

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/@{multiarch}/xfce4/notifyd/xfce4-notifyd
@{exec_path} = @{lib}/{,@{multiarch}/}xfce4/notifyd/xfce4-notifyd
profile xfce-notifyd @{exec_path} {
include <abstractions/base>
include <abstractions/fontconfig-cache-read>
@ -17,5 +17,8 @@ profile xfce-notifyd @{exec_path} {
@{exec_path} mr,
owner @{user_cache_dirs}/xfce4/notifyd/ rw,
owner @{user_cache_dirs}/xfce4/notifyd/** rwk,
include if exists <local/xfce-notifyd>
}

7
apparmor.d/groups/xfce/xfconfd
View File

@ -7,20 +7,19 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/xfce4/xfconf/xfconfd
@{exec_path} += @{lib}/@{multiarch}/xfce4/xfconf/xfconfd
@{exec_path} = @{lib}/{,@{multiarch}/}xfce4/xfconf/xfconfd
profile xfconfd @{exec_path} {
include <abstractions/base>
include <abstractions/xfce>
@{exec_path} mr,
/etc/xdg/xfce4/xfconf/*/*.xml r,
/etc/xdg/xfce4/xfconf/** r,
owner @{HOME}/ r,
owner @{user_config_dirs}/xfce4/ r,
owner @{user_config_dirs}/xfce4/xfconf/*/*.xml{,.new} rw,
owner @{user_config_dirs}/xfce4/xfconf/{,**} rw,
owner /dev/tty@{int} rw,