mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 08:58:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #84 from nobody43/new_user

Browse source 
New user log-in
This commit is contained in:
Alex 2022-10-17 22:30:05 +01:00 committed by GitHub
commit cf5a4168ea
Failed to generate hash of commit
14 changed files with 42 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/bus/ibus-dconf
View file

@ -40,6 +40,7 @@ profile ibus-dconf @{exec_path} flags=(attach_disconnected) {
/var/lib/gdm{3,}/.config/ibus/bus/@{hex}-unix-[0-9]* r,
/var/lib/gdm{3,}/.cache/dconf/ w,
/var/lib/gdm{3,}/.cache/dconf/user rw,
/var/lib/gdm{3,}/.config/dconf/ w,
/var/lib/gdm{3,}/.config/dconf/user rw,
/var/lib/gdm{3,}/greeter-dconf-defaults r,

1
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -51,6 +51,7 @@ profile pipewire-media-session @{exec_path} {
owner @{HOME}/.local/state/ rw,
owner @{HOME}/.local/state/pipewire/{,**} rw,
owner @{user_config_dirs}/pipewire-media-session/ w,
owner @{user_config_dirs}/pipewire/ rw,
owner @{user_config_dirs}/pipewire/** rw,
owner @{user_config_dirs}/pulse/ rw,

2
apparmor.d/groups/freedesktop/pulseaudio
View file

@ -133,9 +133,11 @@ profile pulseaudio @{exec_path} {
owner /var/lib/sddm/.config/pulse/cookie rwk,
# For lightdm
owner /var/lib/lightdm/.config/ w,
owner /var/lib/lightdm/.config/pulse/{,**} rw,
owner /var/lib/lightdm/.config/pulse/cookie k,
owner @{user_config_dirs}/ w,
owner @{user_config_dirs}/pulse/{,**} rw,
owner @{user_cache_dirs}/gstreamer-1.0/registry.*.bin r,

1
apparmor.d/groups/freedesktop/xdg-permission-store
View file

@ -48,6 +48,7 @@ profile xdg-permission-store @{exec_path} flags=(attach_disconnected) {
@{HOME}/@{XDG_DATA_HOME}/flatpak/db/gnome rw,
owner @{user_share_dirs}/flatpak/ w,
owner @{user_share_dirs}/flatpak/db/ rw,
owner @{user_share_dirs}/flatpak/db/.goutputstream-* rw,
owner @{user_share_dirs}/flatpak/db/background rw,

10
apparmor.d/groups/freedesktop/xdg-user-dirs-update
View file

@ -26,6 +26,16 @@ profile xdg-user-dirs-update @{exec_path} {
/var/lib/gdm{3,}/@{XDG_TEMPLATES_DIR}/ rw,
/var/lib/gdm{3,}/@{XDG_VIDEOS_DIR}/ rw,
# new user; change to 'c'
owner @{HOME}/@{XDG_DESKTOP_DIR}/ w,
owner @{HOME}/@{XDG_DOCUMENTS_DIR}/ w,
owner @{HOME}/@{XDG_DOWNLOAD_DIR}/ w,
owner @{HOME}/@{XDG_MUSIC_DIR}/ w,
owner @{HOME}/@{XDG_PICTURES_DIR}/ w,
owner @{HOME}/@{XDG_PUBLICSHARE_DIR}/ w,
owner @{HOME}/@{XDG_TEMPLATES_DIR}/ w,
owner @{HOME}/@{XDG_VIDEOS_DIR}/ w,
owner @{user_config_dirs}/user-dirs.dirs r,
include if exists <local/xdg-user-dirs-update>

1
apparmor.d/groups/gnome/evolution-calendar-factory
View file

@ -42,6 +42,7 @@ profile evolution-calendar-factory @{exec_path} {
/usr/share/glib-2.0/schemas/gschemas.compiled r,
owner @{user_share_dirs}/evolution/calendar/{,**} rwk,
owner @{user_share_dirs}/evolution/tasks/system/ w,
owner @{user_share_dirs}/evolution/tasks/system/tasks.ics r,
owner @{user_cache_dirs}/evolution/calendar/{,**} rwk,
owner @{user_cache_dirs}/evolution/tasks/{,**} rwk,

14
apparmor.d/groups/gnome/evolution-source-registry
View file

@ -30,6 +30,20 @@ profile evolution-source-registry @{exec_path} {
owner @{user_share_dirs}/evolution/{,**} r,
owner @{user_share_dirs}/gvfs-metadata/{,*} r,
# new user; change to 'c'
owner @{user_config_dirs}/evolution/ w,
owner @{user_share_dirs}/evolution/ w,
owner @{user_share_dirs}/evolution/addressbook/ w,
owner @{user_share_dirs}/evolution/addressbook/trash/ w,
owner @{user_share_dirs}/evolution/calendar/ w,
owner @{user_share_dirs}/evolution/calendar/trash/ w,
owner @{user_share_dirs}/evolution/mail/ w,
owner @{user_share_dirs}/evolution/mail/trash/ w,
owner @{user_share_dirs}/evolution/memos/ w,
owner @{user_share_dirs}/evolution/memos/trash/ w,
owner @{user_share_dirs}/evolution/tasks/ w,
owner @{user_share_dirs}/evolution/tasks/trash/ w,
@{PROC}/sys/kernel/osrelease r,
@{PROC}/cmdline r,

5
apparmor.d/groups/gnome/gnome-keyring-daemon
View file

@ -75,7 +75,7 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/ssh-add rix,
/{usr/,}bin/ssh-agent rPx,
/var/lib/gdm{3,}/.local/share/keyrings/ r,
/var/lib/gdm{3,}/.local/share/keyrings/ rw,
# Keyrings location
owner @{user_share_dirs}/keyrings/ rw,
@ -84,6 +84,9 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
# Seahorse and SSH keys
owner @{HOME}/@{XDG_SSH_DIR}/{,**} r,
owner @{HOME}/.local/ w,
owner @{HOME}/.local/share/ w,
owner @{run}/user/@{uid}/keyring/ rw,
owner @{run}/user/@{uid}/keyring/* rw,
owner @{run}/user/@{uid}/ssh-askpass.[0-9A-Z]*/{,*} rw,

1
apparmor.d/groups/gnome/gnome-shell
View file

@ -544,6 +544,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
owner @{user_music_dirs}/**/*.jpg r,
owner @{user_config_dirs}/ibus/ w,
owner @{user_config_dirs}/.goutputstream{,*} rw,
owner @{user_config_dirs}/monitors.xml{,~} rwl,

2
apparmor.d/groups/gnome/gsd-color
View file

@ -129,7 +129,7 @@ profile gsd-color @{exec_path} flags=(attach_disconnected) {
/var/lib/gdm{3,}/.local/share/icc/edid-*.icc rw,
/var/lib/gdm{3,}/greeter-dconf-defaults r,
owner @{user_share_dirs}/icc/ r,
owner @{user_share_dirs}/icc/ rw,
owner @{user_share_dirs}/icc/edid-*.icc rw,
owner @{run}/user/@{uid}/gdm/Xauthority r,

2
apparmor.d/groups/gnome/tracker-extract
View file

@ -93,6 +93,8 @@ profile tracker-extract @{exec_path} {
owner @{MOUNTS}/{,**} r,
owner /tmp/*/{,**} r,
owner @{user_cache_dirs}/ w,
owner @{user_cache_dirs}/tracker3/ w,
owner @{user_cache_dirs}/tracker3/files/{,**} rwk,
owner /tmp/tracker-extract-3-files.*/{,*} rw,

1
apparmor.d/groups/gvfs/gvfsd-smb-browse
View file

@ -59,6 +59,7 @@ profile gvfsd-smb-browse @{exec_path} {
owner @{run}/samba/gencache.tdb rwk,
owner @{run}/user/@{uid}/gvfsd/socket-[a-zA-z0-9]* rw,
owner @{user_cache_dirs}/samba/ w,
owner @{user_cache_dirs}/samba/gencache.tdb rwk,
include if exists <local/gvfsd-smb-browse>

3
apparmor.d/groups/ubuntu/update-notifier
View file

@ -62,6 +62,7 @@ profile update-notifier @{exec_path} {
/var/lib/snapd/desktop/icons/ r,
/var/lib/update-notifier/user.d/ r,
owner @{user_config_dirs}update-notifier/ w,
owner @{user_share_dirs}/applications/ r,
owner @{run}/user/@{uid}/at-spi/bus rw,
@ -75,4 +76,4 @@ profile update-notifier @{exec_path} {
@{PROC}/@{pids}/mountinfo r,
include if exists <local/update-notifier>
}
}

2
apparmor.d/profiles-g-l/htop
View file

@ -30,7 +30,7 @@ profile htop @{exec_path} {
/etc/sensors.d/ r,
/etc/sensors3.conf r,
owner @{user_config_dirs}/ r,
owner @{user_config_dirs}/ rw,
owner @{user_config_dirs}/htop/ rw,
owner @{user_config_dirs}/htop/htoprc rw,