mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add rules for xdg-* profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2021-04-01 23:54:41 +01:00
parent 6044e403e7
commit c35f793ba1
Failed to generate hash of commit
4 changed files with 11 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/profiles-m-z/xdg-email
View file

@ -13,6 +13,9 @@ profile xdg-email @{exec_path} flags=(complain) {
@{exec_path} r,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/sed rix,
owner /dev/tty[0-9]* rw,
include if exists <local/xdg-email>
}

3
apparmor.d/profiles-m-z/xdg-mime
View file

@ -25,6 +25,7 @@ profile xdg-mime @{exec_path} {
/{usr/,}bin/sed rix,
/{usr/,}bin/uname rix,
/{usr/,}bin/file rix,
/{usr/,}bin/tr rix,
/{usr/,}bin/mimetype rPx,
/{usr/,}bin/xprop rPx,
@ -46,6 +47,8 @@ profile xdg-mime @{exec_path} {
owner @{run}/user/[0-9]*/ r,
/dev/tty rw,
# For shell pwd
owner @{HOME}/ r,

2
apparmor.d/profiles-m-z/xdg-open
View file

@ -49,7 +49,7 @@ profile xdg-open @{exec_path} {
# file_inherit
/dev/dri/card[0-9]* rw,
/dev/tty rw,
profile dbus {
include <abstractions/base>

4
apparmor.d/profiles-m-z/xdg-settings
View file

@ -45,9 +45,13 @@ profile xdg-settings @{exec_path} {
/etc/xdg/xfce4/helpers.rc r,
owner @{user_config_dirs}/xfce4/helpers.rc{,.*} rw,
owner @{user_share_dirs}/applications/ r,
owner @{user_share_dirs}/applications/*.desktop r,
owner @{HOME}/.Xauthority r,
/usr/share/terminfo/x/xterm-256color r,
/usr/share/applications/ r,
/var/lib/dbus/machine-id r,
/etc/machine-id r,