mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

add multiple profiles (#341)

Browse Source 
* add multiple profiles
This commit is contained in:
valoq 2024-05-31 12:47:01 +02:00 committed by GitHub
parent 45ae8f5d27
commit bb772167f0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
7 changed files with 94 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

50
apparmor.d/profiles-a-f/atool Normal file
View File

@ -0,0 +1,50 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/atool
profile atool @{exec_path} {
include <abstractions/base>
include <abstractions/perl>
include <abstractions/user-write-strict>
@{exec_path} mr,
@{bin}/7z rix,
@{bin}/arc rix,
@{bin}/arj rix,
@{bin}/bzip2 rix,
@{bin}/bzip2 rix,
@{bin}/bzip rix,
@{bin}/compress rix,
@{bin}/cpio rix,
@{bin}/gunzip rix,
@{bin}/gzip rix,
@{bin}/gzip rix,
@{bin}/jar rix,
@{bin}/lha rix,
@{bin}/lrunzip rix,
@{bin}/lrzcat rix,
@{bin}/lrzip rix,
@{bin}/lrz rix,
@{bin}/lrztar rix,
@{bin}/lrzuntar rix,
@{bin}/lzip rix,
@{bin}/lzma rix,
@{bin}/lzop rix,
@{bin}/lzop rix,
@{bin}/rar rix,
@{bin}/tar rix,
@{bin}/unace rix,
@{bin}/unrar rix,
@{bin}/unxz rix,
@{bin}/unzip rix,
@{bin}/xz rix,
@{bin}/zip rix,
include if exists <local/atool>
}

18
apparmor.d/profiles-a-f/exiftool Normal file
View File

@ -0,0 +1,18 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/vendor_perl/exiftool
profile exiftool @{exec_path} {
include <abstractions/base>
include <abstractions/perl>
include <abstractions/user-read-strict>
@{exec_path} mr,
include if exists <local/exiftool>
}

22
apparmor.d/profiles-g-l/highlight Normal file
View File

@ -0,0 +1,22 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/highlight
profile highlight @{exec_path} {
include <abstractions/base>
include <abstractions/nameservice-strict>
include <abstractions/user-read-strict>
@{exec_path} mr,
/etc/machine-id r,
/etc/highlight/{,**} r,
/usr/share/highlight/{,**} r,
include if exists <local/highlight>
}

2
apparmor.d/groups/apps/imv-wayland → apparmor.d/profiles-g-l/imv-wayland
View File

@ -1,5 +1,5 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,

5
apparmor.d/profiles-m-r/mediainfo
View File

@ -10,12 +10,9 @@ include <tunables/global>
@{exec_path} = @{bin}/mediainfo
profile mediainfo @{exec_path} {
include <abstractions/base>
include <abstractions/user-download-strict>
include <abstractions/user-read-strict>
@{exec_path} mr,
owner @{user_music_dirs}/** r,
owner @{user_videos_dirs}/** r,
include if exists <local/mediainfo>
}

4
apparmor.d/profiles-m-r/mediainfo-gui
View File

@ -15,14 +15,12 @@ profile mediainfo-gui @{exec_path} {
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/gtk>
include <abstractions/user-download-strict>
include <abstractions/user-read-strict>
@{exec_path} mr,
@{bin}/xdg-open rCx -> open,
owner @{user_music_dirs}/** r,
owner @{user_videos_dirs}/** r,
profile open {
include <abstractions/base>

2
apparmor.d/groups/apps/zathura → apparmor.d/profiles-s-z/zathura
View File

@ -1,5 +1,5 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# Copyright (C) 2024 valoq <valoq@mailbox.org>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,