mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): update akonadi profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-07-04 21:36:09 +01:00
parent 1675a26fbf
commit 897bda824f
Failed to generate hash of commit
17 changed files with 19 additions and 211 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
apparmor.d/groups/akonadi/akonadi_akonotes_resource
View file

@ -9,20 +9,12 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_akonotes_resource
profile akonadi_akonotes_resource @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_akonotes_resource_[0-9]rc r,
@ -31,11 +23,6 @@ profile akonadi_akonotes_resource @{exec_path} {
owner @{user_share_dirs}/notes/**/ r,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
/dev/tty r,
include if exists <local/akonadi_akonotes_resource>

12
apparmor.d/groups/akonadi/akonadi_archivemail_agent
View file

@ -9,21 +9,15 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_archivemail_agent
profile akonadi_archivemail_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -34,11 +28,7 @@ profile akonadi_archivemail_agent @{exec_path} {
owner @{user_config_dirs}/emaildefaults r,
owner @{user_config_dirs}/emailidentities.lock rwk,
owner @{user_config_dirs}/emailidentities{,.@{rand6}} rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/akonadi/file_db_data/{,**} r,

15
apparmor.d/groups/akonadi/akonadi_birthdays_resource
View file

@ -9,32 +9,19 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_birthdays_resource
profile akonadi_birthdays_resource @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/{,**} r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
/dev/tty r,
include if exists <local/akonadi_birthdays_resource>

15
apparmor.d/groups/akonadi/akonadi_contacts_resource
View file

@ -9,21 +9,13 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_contacts_resource
profile akonadi_contacts_resource @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -31,11 +23,6 @@ profile akonadi_contacts_resource @{exec_path} {
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/contacts/ r,
owner @{user_share_dirs}/contacts/*.vcf w,

11
apparmor.d/groups/akonadi/akonadi_control
View file

@ -9,12 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_control
profile akonadi_control @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
@ -22,11 +19,7 @@ profile akonadi_control @{exec_path} {
@{bin}/akonadiserver rPx,
/usr/share/akonadi/{,**} r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
/etc/machine-id r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -34,8 +27,6 @@ profile akonadi_control @{exec_path} {
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/libaccounts-glib/accounts.db{,-shm,-wal} rwk,
owner @{user_share_dirs}/akonadi/{,**} rwl,

15
apparmor.d/groups/akonadi/akonadi_followupreminder_agent
View file

@ -9,12 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_followupreminder_agent
profile akonadi_followupreminder_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
network inet dgram,
network inet6 dgram,
@ -22,21 +19,11 @@ profile akonadi_followupreminder_agent @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_followupreminder_agentrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
/dev/tty r,

13
apparmor.d/groups/akonadi/akonadi_ical_resource
View file

@ -10,25 +10,18 @@ include <tunables/global>
profile akonadi_ical_resource @{exec_path} {
include <abstractions/base>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icons/{,**} r,
/usr/share/mime/{,**} r,
owner @{user_cache_dirs}/akonadi_ical_resource_[0-9]/{,*} rwl,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_ical_resource_[0-9]rc rwl,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/apps/korganizer/{,**} rw,
/dev/tty r,

13
apparmor.d/groups/akonadi/akonadi_indexing_agent
View file

@ -9,12 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_indexing_agent
profile akonadi_indexing_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
@ -22,12 +19,8 @@ profile akonadi_indexing_agent @{exec_path} {
/usr/share/akonadi/plugins/serializer/ r,
/usr/share/akonadi/plugins/serializer/*.desktop r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -37,10 +30,6 @@ profile akonadi_indexing_agent @{exec_path} {
owner @{user_config_dirs}/akonadi_indexing_agentrc.lock rwk,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/akonadi/ rw,
owner @{user_share_dirs}/akonadi/** rwlk -> @{user_share_dirs}/akonadi/**,

14
apparmor.d/groups/akonadi/akonadi_maildir_resource
View file

@ -9,31 +9,19 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_maildir_resource
profile akonadi_maildir_resource @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/akonadi/plugins/serializer/{,*.desktop} r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_maildir_resource_[0-9]rc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/akonadi_maildir_resource_[0-9]/{,**} rw,
owner @{user_share_dirs}/akonadi/{,**} rwk,

13
apparmor.d/groups/akonadi/akonadi_maildispatcher_agent
View file

@ -9,13 +9,10 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_maildispatcher_agent
profile akonadi_maildispatcher_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/ssl_certs>
include <abstractions/X-strict>
network inet dgram,
network inet6 dgram,
@ -27,12 +24,8 @@ profile akonadi_maildispatcher_agent @{exec_path} {
@{exec_path} mr,
/usr/share/akonadi/plugins/{,**} r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/usr/share/knotifications{5,6}/akonadi_maildispatcher_agent.notifyrc r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
/etc/machine-id r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -40,11 +33,7 @@ profile akonadi_maildispatcher_agent @{exec_path} {
owner @{user_config_dirs}/akonadi_maildispatcher_agent.notifyrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/ksslcertificatemanager r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_config_dirs}/mailtransports r,
owner @{user_config_dirs}/specialmailcollectionsrc r,

14
apparmor.d/groups/akonadi/akonadi_mailfilter_agent
View file

@ -9,12 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_mailfilter_agent
profile akonadi_mailfilter_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
ptrace (read) peer=akonadi_archivemail_agent,
@ -23,12 +20,7 @@ profile akonadi_mailfilter_agent @{exec_path} {
/usr/share/akonadi/plugins/serializer/ r,
/usr/share/akonadi/plugins/serializer/*.desktop r,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/machine-id r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -43,11 +35,7 @@ profile akonadi_mailfilter_agent @{exec_path} {
owner @{user_config_dirs}/emailidentities.lock rwk,
owner @{user_config_dirs}/emailidentities* rwl,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/kwinrc r,
owner @{tmp}/#@{int} rw,
owner @{tmp}/akonadi_mailfilter_agent.* rwl,

16
apparmor.d/groups/akonadi/akonadi_mailmerge_agent
View file

@ -9,12 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_mailmerge_agent
profile akonadi_mailmerge_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
network inet dgram,
network inet6 dgram,
@ -23,22 +20,11 @@ profile akonadi_mailmerge_agent @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
/dev/tty r,
include if exists <local/akonadi_mailmerge_agent>

15
apparmor.d/groups/akonadi/akonadi_migration_agent
View file

@ -9,30 +9,17 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_migration_agent
profile akonadi_migration_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi-migrationrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
owner @{user_share_dirs}/akonadi_migration_agent/{,**} rw,

1
apparmor.d/groups/akonadi/akonadi_newmailnotifier_agent
View file

@ -29,7 +29,6 @@ profile akonadi_newmailnotifier_agent @{exec_path} {
owner @{user_config_dirs}/emaildefaults r,
owner @{user_config_dirs}/emailidentities.lock rwk,
owner @{user_config_dirs}/emailidentities* rwl,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kmail2rc r,
owner @{user_config_dirs}/specialmailcollectionsrc r,

15
apparmor.d/groups/akonadi/akonadi_notes_agent
View file

@ -9,12 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_notes_agent
profile akonadi_notes_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
network inet dgram,
network inet6 dgram,
@ -23,21 +20,11 @@ profile akonadi_notes_agent @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_*_agentrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
/dev/tty r,

16
apparmor.d/groups/akonadi/akonadi_sendlater_agent
View file

@ -9,12 +9,9 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_sendlater_agent
profile akonadi_sendlater_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
network inet dgram,
network inet6 dgram,
@ -23,23 +20,12 @@ profile akonadi_sendlater_agent @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_sendlater_agentrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
/dev/tty r,
include if exists <local/akonadi_sendlater_agent>

15
apparmor.d/groups/akonadi/akonadi_unifiedmailbox_agent
View file

@ -9,30 +9,17 @@ include <tunables/global>
@{exec_path} = @{bin}/akonadi_unifiedmailbox_agent
profile akonadi_unifiedmailbox_agent @{exec_path} {
include <abstractions/base>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/graphics>
include <abstractions/kde-strict>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X-strict>
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/akonadi_unifiedmailbox_agentrc r,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,
owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r,
/dev/tty r,