diff --git a/apparmor.d/groups/ubuntu/apport b/apparmor.d/groups/ubuntu/apport new file mode 100644 index 00000000..d68fa71d --- /dev/null +++ b/apparmor.d/groups/ubuntu/apport @@ -0,0 +1,32 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2023 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = /usr/share/apport/apport +profile apport @{exec_path} { + include + include + include + include + include + + capability fsetid, + + @{exec_path} mr, + + /usr/share/apport/ r, + + /var/crash/ rw, + owner /var/log/apport.log rw, + + @{PROC}/sys/fs/suid_dumpable w, + @{PROC}/sys/kernel/core_pattern r, + @{PROC}/sys/kernel/core_pattern w, + @{PROC}/sys/kernel/core_pipe_limit w, + + include if exists +} \ No newline at end of file diff --git a/apparmor.d/groups/ubuntu/package-data-downloader b/apparmor.d/groups/ubuntu/package-data-downloader new file mode 100644 index 00000000..11992375 --- /dev/null +++ b/apparmor.d/groups/ubuntu/package-data-downloader @@ -0,0 +1,23 @@ +# apparmor.d - Full set of apparmor profiles +# Copyright (C) 2023 Alexandre Pujol +# SPDX-License-Identifier: GPL-2.0-only + +abi , + +include + +@{exec_path} = @{lib}/update-notifier/package-data-downloader +profile package-data-downloader @{exec_path} { + include + include + include + include + + @{exec_path} mr, + + /var/lib/update-notifier/package-data-downloads/{,**} rw, + + /usr/share/package-data-downloads/ r, + + include if exists +} \ No newline at end of file diff --git a/dists/flags/main.flags b/dists/flags/main.flags index 2e17f735..cf97f94e 100644 --- a/dists/flags/main.flags +++ b/dists/flags/main.flags @@ -25,6 +25,7 @@ akonadi_notes_agent complain akonadi_sendlater_agent complain akonadi_unifiedmailbox_agent complain anacron complain +apport complain at-spi-bus-launcher attach_disconnected,complain at-spi2-registryd attach_disconnected,complain atd complain @@ -224,6 +225,7 @@ nvidia-detector complain nvidia-persistenced complain org.gnome.NautilusPreviewer complain os-prober attach_disconnected,complain +package-data-downloader complain packagekitd attach_disconnected,complain pass-import complain passim complain