mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-01-28 21:09:14 +00:00
parent bd562600cf
commit a5c5ee70a2
Failed to generate hash of commit
6 changed files with 15 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/bus/ibus-extension-gtk3
View file

@ -48,12 +48,13 @@ profile ibus-extension-gtk3 @{exec_path} flags=(attach_disconnected) {
/usr/share/icons/{,**} r, /usr/share/icons/{,**} r,
/usr/share/X11/xkb/** r, /usr/share/X11/xkb/** r,
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} r,
owner @{run}/user/@{uid}/gdm/Xauthority r,
/var/lib/gdm{3,}/.config/ibus/bus/@{md5}-unix-{,wayland-}@{int} r, /var/lib/gdm{3,}/.config/ibus/bus/@{md5}-unix-{,wayland-}@{int} r,
/var/lib/gdm{3,}/.config/dconf/user r, /var/lib/gdm{3,}/.config/dconf/user r,
/var/lib/gdm{3,}/greeter-dconf-defaults r, /var/lib/gdm{3,}/greeter-dconf-defaults r,
/var/lib/gdm{3,}/.config/ibus/bus/ r,
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} r,
owner @{run}/user/@{uid}/gdm/Xauthority r,
# file inherit # file inherit
/dev/tty@{int} rw, /dev/tty@{int} rw,

7
apparmor.d/groups/freedesktop/xdg-document-portal
View file

@ -42,14 +42,12 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
owner @{run}/user/@{uid}/doc/ rw, owner @{run}/user/@{uid}/doc/ rw,
owner @{PROC}/@{pid}/fd/ r,
owner @{PROC}/@{pid}/cgroup r,
@{PROC}/1/cgroup r, @{PROC}/1/cgroup r,
@{PROC}/sys/fs/pipe-max-size r, @{PROC}/sys/fs/pipe-max-size r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/fd/ r,
/dev/fuse rw, /dev/fuse rw,
# file inherit
owner /dev/tty@{int} rw, owner /dev/tty@{int} rw,
profile fusermount { profile fusermount {
@ -76,6 +74,7 @@ profile xdg-document-portal @{exec_path} flags=(attach_disconnected) {
@{PROC}/@{pids}/mounts r, @{PROC}/@{pids}/mounts r,
/dev/fuse rw, /dev/fuse rw,
owner /dev/tty@{int} rw,
include if exists <local/xdg-document-portal_fusermount> include if exists <local/xdg-document-portal_fusermount>
} }

1
apparmor.d/groups/gnome/gdm-xsession
View file

@ -13,6 +13,7 @@ profile gdm-xsession @{exec_path} {
include <abstractions/consoles> include <abstractions/consoles>
include <abstractions/dconf-write> include <abstractions/dconf-write>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>
include <abstractions/openssl>
@{exec_path} mr, @{exec_path} mr,

1
apparmor.d/groups/gnome/gnome-initial-setup
View file

@ -31,6 +31,7 @@ profile gnome-initial-setup @{exec_path} {
@{lib}/gnome-initial-setup-goa-helper rix, @{lib}/gnome-initial-setup-goa-helper rix,
/usr/share/dconf/profile/gdm r, /usr/share/dconf/profile/gdm r,
/usr/share/xml/iso-codes/{,**} r,
/var/lib/gdm{,3}/greeter-dconf-defaults r, /var/lib/gdm{,3}/greeter-dconf-defaults r,

1
apparmor.d/groups/gnome/org.gnome.NautilusPreviewer
View file

@ -26,6 +26,7 @@ profile org.gnome.NautilusPreviewer @{exec_path} {
@{open_path} rPx -> child-open, @{open_path} rPx -> child-open,
/usr/share/poppler/{,**} r,
/usr/share/sushi/org.gnome.NautilusPreviewer.*.gresource r, /usr/share/sushi/org.gnome.NautilusPreviewer.*.gresource r,
/etc/machine-id r, /etc/machine-id r,

1
apparmor.d/profiles-s-z/switcheroo-control
View file

@ -11,6 +11,7 @@ profile switcheroo-control @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/bus-system> include <abstractions/bus-system>
capability net_admin,
capability sys_nice, capability sys_nice,
network netlink raw, network netlink raw,