mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-29 22:35:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Alphanumeric systemd sessions (#47)

Browse source
This commit is contained in:
nobodysu 2022-06-01 17:54:07 +00:00 committed by GitHub
parent b45161a68e
commit 7db753f0c9
Failed to generate hash of commit
15 changed files with 24 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/freedesktop/colord
View file

@ -37,7 +37,7 @@ profile colord @{exec_path} flags=(attach_disconnected) {
@{user_share_dirs}/icc/edid-*.icc r,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/* r,
@{sys}/class/drm/ r,
@{sys}/class/video4linux/ r,

4
apparmor.d/groups/gnome/gdm
View file

@ -44,8 +44,8 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
@{run}/gdm{3,}/gdm.pid rw,
@{run}/gdm{3,}/greeter/ rw,
@{run}/systemd/seats/seat[0-9]* r,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/[0-9]*.ref r,
@{run}/systemd/sessions/* r,
@{run}/systemd/sessions/*.ref r,
@{run}/systemd/userdb/ r,
@{run}/systemd/users/@{uid} r,
@{run}/udev/tags/master-of-seat/ r,

2
apparmor.d/groups/gnome/gdm-session-worker
View file

@ -61,7 +61,7 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
@{run}/faillock/[a-zA-z0-9]* rwk,
@{run}/gdm/custom.conf r,
@{run}/systemd/sessions/[0-9]*.ref rw,
@{run}/systemd/sessions/*.ref rw,
@{run}/systemd/users/@{uid} r,
@{run}/utmp rwk,

6
apparmor.d/groups/gnome/gnome-control-center
View file

@ -83,8 +83,8 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/gnome-shell-disable-extensions w,
owner @{run}/user/@{uid}/webkitgtk/{,**} rw,
@{run}/systemd/users/@{uid} r,
@{run}/systemd/sessions/ r,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/ r,
@{run}/systemd/sessions/* r,
@{run}/udev/data/+dmi:* r,
@{run}/udev/data/+input* r, # for mouse, keyboard, touchpad
@ -123,4 +123,4 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
/dev/video[0-9]* rw,
include if exists <local/gnome-control-center>
}
}

4
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -105,8 +105,8 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/gnome-session-leader-fifo rw,
owner @{run}/user/@{uid}/ICEauthority{,-[a-z]} rwl,
@{run}/systemd/inhibit/[0-9]*.ref rw,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/[0-9]*.ref rw,
@{run}/systemd/sessions/* r,
@{run}/systemd/sessions/*.ref rw,
@{run}/systemd/users/@{uid} r,
/tmp/.ICE-unix/[0-9]* rw,

4
apparmor.d/groups/gnome/gnome-shell
View file

@ -137,8 +137,8 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
@{run}/systemd/users/@{uid} r,
@{run}/systemd/seats/seat[0-9]* r,
@{run}/systemd/sessions/ r,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/ r,
@{run}/systemd/sessions/* r,
@{run}/systemd/inhibit/[0-9]*.ref rw,
@{run}/udev/tags/seat/ r,

5
apparmor.d/groups/gnome/gnome-system-monitor
View file

@ -39,7 +39,8 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/dconf/user rw,
owner @{run}/user/@{uid}/doc/ rw,
@{run}/systemd/sessions/[0-9]*{,.ref} r,
@{run}/systemd/sessions/* r,
@{run}/systemd/sessions/*.ref r,
@{sys}/devices/pci[0-9]*/**/net/*/statistics/collisions r,
@{sys}/devices/pci[0-9]*/**/net/*/statistics/rx_{bytes,errors,packets} r,
@ -65,4 +66,4 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
@{PROC}/vmstat r,
include if exists <local/gnome-system-monitor>
}
}

2
apparmor.d/groups/gnome/gsd-xsettings
View file

@ -54,7 +54,7 @@ profile gsd-xsettings @{exec_path} {
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[a-zA-z0-9]* r,
owner @{run}/systemd/users/@{uid}/ r,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/* r,
owner @{PROC}/@{pid}/fd/ r,

2
apparmor.d/groups/gvfs/gvfs-udisks2-volume-monitor
View file

@ -46,7 +46,7 @@ profile gvfs-udisks2-volume-monitor @{exec_path} {
owner @{run}/user/@{uid}/dconf/user rw,
@{run}/mount/utab r,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/* r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/fd/ r,

4
apparmor.d/groups/virt/cockpit-session
View file

@ -32,7 +32,7 @@ profile cockpit-session @{exec_path} flags=(attach_disconnected) {
/etc/shells r,
@{run}/faillock/[a-zA-z0-9]* rwk,
@{run}/systemd/sessions/[0-9].ref rw,
@{run}/systemd/sessions/*.ref rw,
@{run}/systemd/userdb/ r,
@{run}/utmp rwk,
@ -45,4 +45,4 @@ profile cockpit-session @{exec_path} flags=(attach_disconnected) {
@{PROC}/@{pids}/fd/ r,
include if exists <local/cockpit-session>
}
}

2
apparmor.d/profiles-g-l/labwc
View file

@ -58,7 +58,7 @@ profile labwc @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/c13:[0-9]* r, # for /dev/input/*
@{run}/udev/data/c226:[0-9]* r, # for /dev/dri/card*
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/* r,
@{run}/systemd/seats/seat[0-9]* r,
@{run}/user/@{uid}/wayland-[0-9].lock k,

2
apparmor.d/profiles-g-l/light-locker
View file

@ -25,7 +25,7 @@ profile light-locker @{exec_path} {
owner @{PROC}/@{pid}/cgroup r,
# when locking the screen and switching/closing sessions
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/* r,
include <abstractions/dconf>
owner @{run}/user/@{uid}/dconf/ rw,

2
apparmor.d/profiles-m-r/ps
View file

@ -52,7 +52,7 @@ profile ps @{exec_path} flags=(attach_disconnected) {
@{PROC}/tty/drivers r,
@{PROC}/uptime r,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/* r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node[0-9]*/meminfo r,

2
apparmor.d/profiles-s-z/sddm
View file

@ -157,7 +157,7 @@ profile sddm @{exec_path} {
# Run SDDM on a specific TTY
/dev/tty[0-9]* rw,
@{run}/systemd/sessions/[0-9]*.ref rw,
@{run}/systemd/sessions/*.ref rw,
profile sddm-scripts {

4
apparmor.d/profiles-s-z/spice-vdagentd
View file

@ -16,7 +16,7 @@ profile spice-vdagentd @{exec_path} {
owner @{run}/spice-vdagentd/spice-vdagentd.pid rw,
@{run}/systemd/seats/seat[0-9]* r,
@{run}/systemd/sessions/[0-9]* r,
@{run}/systemd/sessions/* r,
@{run}/systemd/users/@{uid} r,
@{PROC}/@{pids}/cgroup r,
@ -25,4 +25,4 @@ profile spice-vdagentd @{exec_path} {
/dev/vport[0-9]*p[0-9]* rw,
include if exists <local/spice-vdagentd>
}
}