mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-31 15:25:02 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): restic some well known path.

Browse source
This commit is contained in:
Alexandre Pujol 2024-09-09 19:47:25 +01:00
parent d4e380ad46
commit a99fbaa0be
Failed to generate hash of commit
9 changed files with 17 additions and 17 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
apparmor.d/abstractions/common/chromium
View file

@ -26,10 +26,10 @@
/var/tmp/ r, /var/tmp/ r,
owner @{tmp}/.org.chromium.Chromium.@{rand6} rw, owner @{tmp}/.org.chromium.Chromium.@{rand6} rw,
owner @{tmp}/.org.chromium.Chromium.@{rand6}/{,**} rw, owner @{tmp}/.org.chromium.Chromium.@{rand6}/{,**} rw,
owner @{tmp}/scoped_dir*/ rw, owner @{tmp}/scoped_dir@{rand6}/ rw,
owner @{tmp}/scoped_dir*/SingletonCookie w, owner @{tmp}/scoped_dir@{rand6}/SingletonCookie w,
owner @{tmp}/scoped_dir*/SingletonSocket w, owner @{tmp}/scoped_dir@{rand6}/SingletonSocket w,
owner @{tmp}/scoped_dir*/SS w, owner @{tmp}/scoped_dir@{rand6}/SS w,
/dev/shm/ r, /dev/shm/ r,
owner /dev/shm/.org.chromium.Chromium.@{rand6} rw, owner /dev/shm/.org.chromium.Chromium.@{rand6} rw,

2
apparmor.d/abstractions/common/electron
View file

@ -50,7 +50,7 @@
owner @{HOME}/.pki/nssdb/{cert9,key4}.db rwk, owner @{HOME}/.pki/nssdb/{cert9,key4}.db rwk,
owner @{HOME}/.pki/nssdb/{cert9,key4}.db-journal rw, owner @{HOME}/.pki/nssdb/{cert9,key4}.db-journal rw,
owner @{user_share_dirs}/.org.chromium.Chromium.* rw, owner @{user_share_dirs}/.org.chromium.Chromium.@{rand6} rw,
owner @{tmp}/.org.chromium.Chromium.@{rand6} rw, owner @{tmp}/.org.chromium.Chromium.@{rand6} rw,
owner @{tmp}/.org.chromium.Chromium.@{rand6}/ rw, owner @{tmp}/.org.chromium.Chromium.@{rand6}/ rw,

12
apparmor.d/groups/apt/apt-cdrom
View file

@ -33,11 +33,11 @@ profile apt-cdrom @{exec_path} flags=(complain) {
# @{run}/udev/data/* r, # @{run}/udev/data/* r,
# For cd-roms # For cd-roms
/media/cdrom[0-9]/ r, /media/cdrom@{int}/ r,
/media/cdrom[0-9]/**/ r, /media/cdrom@{int}/**/ r,
/media/cdrom[0-9]/.disk/info r, /media/cdrom@{int}/.disk/info r,
/media/cdrom[0-9]/dists/**/binary-*/Packages{,.gz} r, /media/cdrom@{int}/dists/**/binary-*/Packages{,.gz} r,
/media/cdrom[0-9]/dists/**/i18n/Translation-en{,.gz} r, /media/cdrom@{int}/dists/**/i18n/Translation-en{,.gz} r,
# For pendrives # For pendrives
@{MOUNTS}/ r, @{MOUNTS}/ r,
@ -63,7 +63,7 @@ profile apt-cdrom @{exec_path} flags=(complain) {
/etc/fstab r, /etc/fstab r,
/media/cdrom[0-9]/ r, /media/cdrom@{int}/ r,
include if exists <local/apt-cdrom_mount> include if exists <local/apt-cdrom_mount>
} }

2
apparmor.d/groups/freedesktop/cpupower
View file

@ -32,7 +32,7 @@ profile cpupower @{exec_path} {
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_{min,max}_freq rw, @{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_{min,max}_freq rw,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_governor rw, @{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_governor rw,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_setspeed rw, @{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_setspeed rw,
@{sys}/devices/system/cpu/cpu@{int}/cpuidle/state[0-9]/disable rw, @{sys}/devices/system/cpu/cpu@{int}/cpuidle/state@{int}/disable rw,
@{sys}/devices/system/cpu/cpu@{int}/topology/{physical_package_id,core_id} r, @{sys}/devices/system/cpu/cpu@{int}/topology/{physical_package_id,core_id} r,

2
apparmor.d/groups/freedesktop/xorg
View file

@ -125,7 +125,7 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
@{PROC}/ioports r, @{PROC}/ioports r,
@{PROC}/mtrr rw, @{PROC}/mtrr rw,
/dev/fb[0-9] rw, /dev/fb@{int} rw,
/dev/input/event@{int} rw, /dev/input/event@{int} rw,
/dev/shm/#@{int} rw, /dev/shm/#@{int} rw,
/dev/shm/shmfd-* rw, /dev/shm/shmfd-* rw,

2
apparmor.d/groups/freedesktop/xrdb
View file

@ -19,7 +19,7 @@ profile xrdb @{exec_path} {
@{bin}/{,*-}cpp-[0-9]* rix, @{bin}/{,*-}cpp-[0-9]* rix,
@{sh_path} rix, @{sh_path} rix,
@{bin}/cpp rix, @{bin}/cpp rix,
@{lib}/gcc/@{multiarch}/@{int}*/cc1 rix, @{lib}/gcc/@{multiarch}/@{version}/cc1 rix,
@{lib}/llvm-[0-9]*/bin/clang rix, @{lib}/llvm-[0-9]*/bin/clang rix,
/usr/include/stdc-predef.h r, /usr/include/stdc-predef.h r,

2
apparmor.d/groups/network/mullvad-gui
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{name} = Mullvad*VPN @{name} = Mullvad?VPN
@{lib_dirs} = /opt/@{name} @{lib_dirs} = /opt/@{name}
@{config_dirs} = @{user_config_dirs}/@{name} @{config_dirs} = @{user_config_dirs}/@{name}
@{cache_dirs} = @{user_cache_dirs}/@{name} @{cache_dirs} = @{user_cache_dirs}/@{name}

2
apparmor.d/groups/pacman/pacman
View file

@ -123,7 +123,7 @@ profile pacman @{exec_path} flags=(attach_disconnected) {
@{user_pkg_dirs}/**.pkg.tar.zst{,.sig} r, @{user_pkg_dirs}/**.pkg.tar.zst{,.sig} r,
owner /var/lib/pacman/{,**} rwl, owner /var/lib/pacman/{,**} rwl,
owner @{tmp}/alpm_*/{,**} rw, owner @{tmp}/alpm_@{rand6}/{,**} rw,
owner @{tmp}/checkup-db-@{int}/sync/{,*.db*} rw, owner @{tmp}/checkup-db-@{int}/sync/{,*.db*} rw,
owner @{tmp}/checkup-db-@{int}/db.lck rw, owner @{tmp}/checkup-db-@{int}/db.lck rw,

2
apparmor.d/profiles-g-l/gtk-youtube-viewer
View file

@ -98,7 +98,7 @@ profile gtk-youtube-viewer @{exec_path} {
include <abstractions/xdg-open> include <abstractions/xdg-open>
@{bin}/xdg-open mr, @{bin}/xdg-open mr,
@{lib}/@{multiarch}/glib-[0-9]*/gio-launch-desktop mr, @{lib}/@{multiarch}/glib-@{version}/gio-launch-desktop mr,
@{sh_path} rix, @{sh_path} rix,
@{bin}/{m,g,}awk rix, @{bin}/{m,g,}awk rix,