mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-29 22:35:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

feat(profiles): add gsettings.

Browse source
This commit is contained in:
Alexandre Pujol 2023-03-12 15:30:33 +00:00
parent 8bdce8bd62
commit 98a1a00a14
Failed to generate hash of commit
9 changed files with 31 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/_full/systemd
View file

@ -72,6 +72,7 @@ profile systemd /{usr/,}lib/systemd/systemd flags=(complain) {
/{usr/,}bin/gjs rPx,
/{usr/,}bin/gnome-keyring-daemon rPx,
/{usr/,}bin/gnome-shell rPx,
/{usr/,}bin/gsettings rPx,
/{usr/,}lib/dconf/dconf-service rPx,
/{usr/,}lib/gvfs/gvfs-* rPx,
/{usr/,}lib/gvfs/gvfsd* rPx,

2
apparmor.d/groups/bus/dbus-run-session
View file

@ -19,7 +19,7 @@ profile dbus-run-session @{exec_path} {
/{usr/,}bin/dbus-daemon rPx,
/{usr/,}bin/gnome-session rix,
/{usr/,}bin/gnome-shell rPx,
/{usr/,}bin/gsettings rix,
/{usr/,}bin/gsettings rPx,
@{libexec}/gnome-session-binary rPx,
/usr/share/glib-2.0/schemas/gschemas.compiled r,

2
apparmor.d/groups/gnome/gdm-wayland-session
View file

@ -45,7 +45,7 @@ profile gdm-wayland-session @{exec_path} {
/{usr/,}bin/gettext.sh r,
/{usr/,}bin/gnome-session rix,
/{usr/,}bin/grep rix,
/{usr/,}bin/gsettings rix,
/{usr/,}bin/gsettings rPx,
/{usr/,}bin/head rix,
/{usr/,}bin/id rix,
/{usr/,}bin/locale rix,

2
apparmor.d/groups/gnome/gdm-xsession
View file

@ -24,7 +24,7 @@ profile gdm-xsession @{exec_path} {
/{usr/,}bin/gettext rix,
/{usr/,}bin/gettext.sh r,
/{usr/,}bin/gnome-session rix,
/{usr/,}bin/gsettings rix,
/{usr/,}bin/gsettings rPx,
/{usr/,}bin/id rix,
/{usr/,}bin/locale rix,
/{usr/,}bin/locale-check rix,

2
apparmor.d/groups/gnome/gnome-session-binary
View file

@ -138,7 +138,7 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/env rix,
/{usr/,}bin/gnome-session rix,
/{usr/,}bin/grep rix,
/{usr/,}bin/gsettings rix,
/{usr/,}bin/gsettings rPx,
/{usr/,}bin/gsettings-data-convert rix,
/{usr/,}bin/mkdir rix,
/{usr/,}bin/session-migration rix,

2
apparmor.d/groups/network/mullvad-gui
View file

@ -35,7 +35,7 @@ profile mullvad-gui @{exec_path} {
"/opt/Mullvad VPN/*.so*" mr,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/gsettings rix,
/{usr/,}bin/gsettings rPx,
/{usr/,}bin/xdg-open rPx,
"/opt/Mullvad VPN/{,**}" r,

23
apparmor.d/profiles-g-l/gsettings Normal file
View file

@ -0,0 +1,23 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/gsettings
profile gsettings @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
@{exec_path} mr,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/usr/share/dconf/profile/gdm r,
/usr/share/gdm/greeter-dconf-defaults r,
owner /dev/tty[0-9]* rw,
include if exists <local/gsettings>
}

2
apparmor.d/profiles-s-z/xdm-xsession
View file

@ -39,7 +39,7 @@ profile xdm-xsession @{exec_path} {
@{libexec}/gnome-session-binary rPx,
/{usr/,}bin/gnome rix,
/{usr/,}bin/gnome-session rix,
/{usr/,}bin/gsettings rix,
/{usr/,}bin/gsettings rPx,
@{etc_ro}/X11/xdm/sys.xsession rix,
@{etc_ro}/X11/xinit/xinitrc.d/50-systemd-user.sh rix,

1
dists/flags/main.flags
View file

@ -113,6 +113,7 @@ grub-syslinux2cfg complain
gsd-media-keys attach_disconnected,complain
gsd-print-notifications attach_disconnected,complain
gsd-printer attach_disconnected,complain
gsettings complain
gvfsd-dav complain
hostnamectl complain
ibus-engine-table complain