mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-12-24 14:06:47 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add more lxqt files (#600)
Some checks are pending
Ubuntu / check (push) Waiting to run
Details
Ubuntu / build (default, ubuntu-22.04) (push) Blocked by required conditions
Details
Ubuntu / build (default, ubuntu-24.04) (push) Blocked by required conditions
Details
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Blocked by required conditions
Details
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Blocked by required conditions
Details
Ubuntu / tests (push) Blocked by required conditions
Details

Browse source 
* Create abstraction for lxqt desktop group

first file for the LXQT 2.0 desktop group

* Update lxqt

* xdg-desktop abstraction added

* removing tabs

* Create startlxqt

starter file for LXQT Desktop

* Create startlxqt

* fixing startlxqt

I use sddm as display manager

I cant remove the other file - only use graphical env., sorry

After startlxqt i would add  2 lines to sddm to enable the start of LXQT desktop

* Delete apparmor.d/profiles-s-z/startlxqt

* indented by 2 spaces (like other entries)

* Update sddm

Enable sddm to start an lxqt desktop session

* Create lxqt-session

lxqt-session to be started by startlxqt. Display manager: sddm

* Update lxqt-session

* Update lxqt-session

* removed trailing whitespace

* Update kscreen_backend_launcher to support lxqt desktop

is needed for several complaints:
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/lxqt.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open owner @{user_config_dirs}/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r
DENIED  kscreen_backend_launcher open /usr/share/lxqt/session.conf comm=kscreen_backend requested_mask=r denied_mask=r

* Update lxqt-session

* Create lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* Update lxqt-panel

* fix conflicting x

* Update lxqt-panel

add child-open

* remove  include <abstractions/app-launcher-user>

you think its too permissive to have app-launcher-user here, right?

* Update lxqt-panel

add needed programs

* Update lxqt-panel

turning back to layout of corresponding xfce file.

* Create lxqt-globalkeysd

* Create lxqt-about

* Create lxqt-leave

* Create lxqt-runner

* Update lxqt-leave

* Update lxqt-runner

* Update lxqt-globalkeysd

* remove video in lxqt-about

* Update lxqt-about

* Update lxqt-runner

* remove abstr. in lxqt-globalkeysd

* remove abstr. in lxqt-runner

* remove abstr. in lxqt-leave
This commit is contained in:
Besanon 2024-11-23 18:44:18 +01:00 committed by GitHub
parent 8efdc5d8e3
commit 7acd9079a2
Failed to generate hash of commit
4 changed files with 126 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

28
apparmor.d/groups/lxqt/lxqt-about Normal file
View file

@ -0,0 +1,28 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2024 Besanon <m231009ts@mailfence.com>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/lxqt-about
profile lxqt-about @{exec_path} {
include <abstractions/base>
include <abstractions/lxqt>
@{exec_path} mr,
/usr/share/desktop-directories/{,**} r,
/etc/xdg/menus/lxqt-applications.menu r,
owner /tmp/@{int} r,
/dev/tty rw,
include if exists <local/lxqt-about>
}
# vim:syntax=apparmor

40
apparmor.d/groups/lxqt/lxqt-globalkeysd Normal file
View file

@ -0,0 +1,40 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2024 Besanon <m231009ts@mailfence.com>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/lxqt-globalkeysd
profile lxqt-globalkeysd @{exec_path} {
include <abstractions/base>
include <abstractions/bus-accessibility>
include <abstractions/lxqt>
include <abstractions/nameservice-strict>
@{exec_path} mr,
@{open_path} rPx -> child-open-help,
@{bin}/screengrab rPx,
@{bin}/lxqt-config-brightness rPx,
/usr/share/lxqt/globalkeyshortcuts.conf rw,
/var/lib/dbus/machine-id r,
owner @{user_config_dirs}/lxqt/ r,
owner @{user_config_dirs}/lxqt/globalkeyshortcuts.conf.lock wrk,
owner @{user_config_dirs}/lxqt/#@{int} wr,
owner @{user_config_dirs}/lxqt/globalkeyshortcuts.conf.@{rand6} rw,
owner @{user_config_dirs}/lxqt/globalkeyshortcuts.conf.@{rand6} l -> @{user_config_dirs}/lxqt/#@{int},
owner /tmp/@{int} r,
/dev/tty rw,
include if exists <local/lxqt-globalkeysd>
}
# vim:syntax=apparmor

24
apparmor.d/groups/lxqt/lxqt-leave Normal file
View file

@ -0,0 +1,24 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2024 Besanon <m231009ts@mailfence.com>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/lxqt-leave
profile lxqt-leave @{exec_path} {
include <abstractions/base>
include <abstractions/lxqt>
@{exec_path} mr,
owner /tmp/@{int} r,
/dev/tty rw,
include if exists <local/lxqt-leave>
}
# vim:syntax=apparmor

34
apparmor.d/groups/lxqt/lxqt-runner Normal file
View file

@ -0,0 +1,34 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2024 Besanon <m231009ts@mailfence.com>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/4.0>,
include <tunables/global>
@{exec_path} = @{bin}/lxqt-runner
profile lxqt-runner @{exec_path} {
include <abstractions/base>
include <abstractions/lxqt>
@{exec_path} mr,
/usr/share/icons/ r,
/usr/share/desktop-directories/ r,
/usr/share/desktop-directories/{,**} r,
/etc/xdg/menus/lxqt-applications.menu r,
owner @{user_config_dirs}/lxqt/lxqt-runner.conf.lock rwk,
owner @{user_config_dirs}/lxqt/#@{int} rw,
owner @{user_config_dirs}/lxqt/lxqt-runner.conf.@{rand6} rwkl -> @{user_config_dirs}/lxqt/#@{int},
owner /tmp/@{int} r,
/dev/tty rw,
include if exists <local/lxqt-runner>
}
# vim:syntax=apparmor