mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 17:08:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): add more xfce profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-04-09 23:59:52 +01:00
parent 3d8cdc0834
commit a966cc0a93
Failed to generate hash of commit
3 changed files with 79 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
apparmor.d/groups/xfce/ristretto Normal file
View file

@ -0,0 +1,26 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/ristretto
profile ristretto @{exec_path} {
include <abstractions/base>
include <abstractions/thumbnails-cache-read>
include <abstractions/user-read-strict>
include <abstractions/user-write-strict>
include <abstractions/xfce>
@{exec_path} mr,
@{open_path} rPx -> child-open-help,
/usr/share/file/{,**} r,
owner @{user_config_dirs}/ristretto/{,**} rw,
include if exists <local/ristretto>
}

21
apparmor.d/groups/xfce/xfce-dict Normal file
View file

@ -0,0 +1,21 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/xfce4-dict
profile xfce-dict @{exec_path} {
include <abstractions/base>
include <abstractions/xfce>
@{exec_path} mr,
@{open_path} rPx -> child-open-help,
owner @{user_config_dirs}/xfce4-dict/{,**} rw,
include if exists <local/xfce-dict>
}

32
apparmor.d/groups/xfce/xfce-sensors Normal file
View file

@ -0,0 +1,32 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/xfce4-sensors
profile xfce-sensors @{exec_path} {
include <abstractions/base>
include <abstractions/xfce>
@{exec_path} mr,
@{sys}/class/hwmon/ r,
@{sys}/class/power_supply/ r,
@{sys}/class/thermal/ r,
@{sys}/devices/@{pci}/i2c-@{int}/name r,
@{sys}/devices/**/hwmon@{int}/ r,
@{sys}/devices/**/hwmon@{int}/{name,temp*} r,
@{sys}/devices/**/hwmon@{int}/**/ r,
@{sys}/devices/**/hwmon@{int}/**/{name,temp*} r,
@{sys}/devices/**/hwmon/ r,
@{sys}/devices/**/hwmon/{name,temp*} r,
@{sys}/devices/**/hwmon/**/ r,
@{sys}/devices/**/hwmon/**/{name,temp*} r,
@{sys}/devices/**/power_supply/**/{uevent,type,online} r,
@{sys}/devices/virtual/thermal/thermal_zone@{int}/temp r,
include if exists <local/xfce-sensors>
}