mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 07:54:17 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): cleanup xsession logs.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-05-06 20:47:08 +01:00
parent 4b4e14b1d6
commit c2d786200f
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
10 changed files with 7 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
apparmor.d/abstractions/X-strict
View File

@ -13,13 +13,14 @@
/etc/X11/cursors/{,**} r,
owner @{HOME}/.ICEauthority r, # ICEauthority files required for X authentication, per user
owner @{HOME}/.Xauthority r, # Xauthority files required for X connections, per user
owner @{HOME}/.ICEauthority rw, # ICEauthority files required for X authentication, per user
owner @{HOME}/.Xauthority rw, # Xauthority files required for X connections, per user
owner @{HOME}/.xsession-errors rw,
/tmp/.ICE-unix/* rw,
/tmp/.X@{int}-lock rw,
/tmp/.X11-unix/* rw,
owner @{tmp}/xauth_@{rand6} rl -> /tmp/#@{int},
owner @{tmp}/xauth_@{rand6} rl -> @{tmp}/#@{int},
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} rw, # Xwayland
owner @{run}/user/@{uid}/gdm{[1-9],}/Xauthority r,

2
apparmor.d/groups/display-manager/lightdm
View File

@ -68,8 +68,6 @@ profile lightdm @{exec_path} flags=(attach_disconnected) {
/var/log/lightdm/{,**} rw,
owner @{HOME}/.dmrc r,
owner @{HOME}/.Xauthority rw,
owner @{HOME}/.xsession-errors{,.old} rw,
@{run}/faillock/ rw,
@{run}/faillock/user rwk,

2
apparmor.d/groups/display-manager/x11-xsession
View File

@ -63,8 +63,6 @@ profile x11-xsession @{exec_path} {
/etc/profile.d/*.sh r,
/etc/X11/{,**} r,
owner @{HOME}/.xsession-errors w,
owner @{tmp}/file* rw,
owner @{tmp}/tmp.@{rand10} rw,

1
apparmor.d/groups/freedesktop/pulseaudio
View File

@ -115,7 +115,6 @@ profile pulseaudio @{exec_path} {
# file_inherit
owner /dev/tty@{int} rw,
owner @{HOME}/.xsession-errors w,
include if exists <local/pulseaudio>
}

2
apparmor.d/groups/freedesktop/xhost
View File

@ -15,8 +15,6 @@ profile xhost @{exec_path} {
@{exec_path} mr,
owner @{HOME}/.xsession-errors w,
/dev/tty@{int} rw,
# Silencer

3
apparmor.d/groups/freedesktop/xorg
View File

@ -63,7 +63,6 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
/etc/X11/{,**} r,
owner @{HOME}/ r,
owner @{HOME}/.xsession-errors w,
owner @{user_share_dirs}/xorg/ rw,
owner @{user_share_dirs}/xorg/Xorg.@{int}.log{,.old} rw,
@ -84,7 +83,7 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
/tmp/ r,
/tmp/server-@{int}.xkm rw,
owner @{tmp}/.tX@{int}-lock rwk,
owner @{tmp}/.X@{int}-lock rwkl -> /tmp/.tX@{int}-lock,
owner @{tmp}/.X@{int}-lock rwkl -> @{tmp}/.tX@{int}-lock,
owner @{tmp}/server-* rwk,
owner @{tmp}/serverauth.* r,

6
apparmor.d/groups/freedesktop/xsetroot
View File

@ -20,17 +20,11 @@ profile xsetroot @{exec_path} {
/usr/share/icons/{,**} r,
/etc/X11/cursors/*.theme r,
owner @{HOME}/.icons/** r,
owner @{HOME}/.Xauthority r,
owner @{HOME}/.xsession-errors w,
owner @{user_share_dirs}/sddm/xorg-session.log w,
owner @{user_share_dirs}/sddm/wayland-session.log w,
owner @{tmp}/xauth_@{rand6} r,
@{run}/sddm/\{@{uuid}\} r,
@{run}/user/@{uid}/xauth_@{rand6} rl,
@{run}/sddm/xauth_@{rand6} r,

1
apparmor.d/groups/kde/kscreenlocker_greet
View File

@ -67,7 +67,6 @@ profile kscreenlocker_greet @{exec_path} {
/var/lib/dbus/machine-id r,
owner @{HOME}/.face.icon r,
owner @{HOME}/.xsession-errors w,
owner @{user_pictures_dirs}/{,**} r,
owner @{user_cache_dirs}/ rw,

2
apparmor.d/groups/xfce/xfpm-power-backlight-helper
View File

@ -13,8 +13,6 @@ profile xfpm-power-backlight-helper @{exec_path} {
@{exec_path} mr,
owner @{HOME}/.xsession-errors w,
@{sys}/class/backlight/ r,
@{sys}/class/leds/ r,
@{sys}/devices/@{pci}/backlight/**/{max_brightness,actual_brightness} r,

1
apparmor.d/profiles-s-z/thunderbird
View File

@ -167,7 +167,6 @@ profile thunderbird @{exec_path} {
# file_inherit
owner /dev/tty@{int} rw,
owner @{HOME}/.xsession-errors w,
# Silencer
deny @{HOME}/.mozilla/** mrwkl,