mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-18 00:48:10 +01:00
feat(groups/g*): vim syntax support
Add vim modeline instructing the editor to use syntax plugin provided by apparmor. Continuation of #393 to keep the diff list relatively short.
This commit is contained in:
parent
4d707633a1
commit
da93eb29d8
166 changed files with 374 additions and 42 deletions
|
@ -31,3 +31,5 @@ profile chrome-gnome-shell @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/chrome-gnome-shell>
|
include if exists <local/chrome-gnome-shell>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -35,4 +35,6 @@ profile deja-dup-monitor @{exec_path} {
|
||||||
/tmp/ r,
|
/tmp/ r,
|
||||||
|
|
||||||
include if exists <local/deja-dup-monitor>
|
include if exists <local/deja-dup-monitor>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -52,4 +52,6 @@ profile epiphany-search-provider @{exec_path} {
|
||||||
deny @{user_share_dirs}/gvfs-metadata/* r,
|
deny @{user_share_dirs}/gvfs-metadata/* r,
|
||||||
|
|
||||||
include if exists <local/epiphany-search-provider>
|
include if exists <local/epiphany-search-provider>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -15,4 +15,6 @@ profile epiphany-webapp-provider @{exec_path} {
|
||||||
owner @{user_share_dirs}/ r,
|
owner @{user_share_dirs}/ r,
|
||||||
|
|
||||||
include if exists <local/epiphany-webapp-provider>
|
include if exists <local/epiphany-webapp-provider>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -68,3 +68,5 @@ profile evolution-addressbook-factory @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/evolution-addressbook-factory>
|
include if exists <local/evolution-addressbook-factory>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -40,3 +40,5 @@ profile evolution-alarm-notify @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/evolution-alarm-notify>
|
include if exists <local/evolution-alarm-notify>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -85,3 +85,5 @@ profile evolution-calendar-factory @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/evolution-calendar-factory>
|
include if exists <local/evolution-calendar-factory>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -61,3 +61,5 @@ profile evolution-source-registry @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/evolution-source-registry>
|
include if exists <local/evolution-source-registry>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -16,4 +16,6 @@ profile evolution-user-prompter @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
include if exists <local/evolution-user-prompter>
|
include if exists <local/evolution-user-prompter>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -15,4 +15,6 @@ profile gcr-prompter @{exec_path} {
|
||||||
owner @{HOME}/@{XDG_SSH_DIR}/ r,
|
owner @{HOME}/@{XDG_SSH_DIR}/ r,
|
||||||
|
|
||||||
include if exists <local/gcr-prompter>
|
include if exists <local/gcr-prompter>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -20,4 +20,6 @@ profile gcr-ssh-agent @{exec_path} {
|
||||||
owner @{run}/user/@{uid}/ssh-askpass.@{rand6}/{,*} rw,
|
owner @{run}/user/@{uid}/ssh-askpass.@{rand6}/{,*} rw,
|
||||||
|
|
||||||
include if exists <local/gcr-ssh-agent>
|
include if exists <local/gcr-ssh-agent>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -105,3 +105,5 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gdm>
|
include if exists <local/gdm>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -54,4 +54,6 @@ profile gdm-generate-config @{exec_path} {
|
||||||
}
|
}
|
||||||
|
|
||||||
include if exists <local/gdm-generate-config>
|
include if exists <local/gdm-generate-config>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -17,3 +17,5 @@ profile gdm-runtime-config @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gdm-runtime-config>
|
include if exists <local/gdm-runtime-config>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -63,3 +63,5 @@ profile gdm-session @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gdm-session>
|
include if exists <local/gdm-session>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -124,3 +124,5 @@ profile gdm-session-worker @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gdm-session-worker>
|
include if exists <local/gdm-session-worker>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -93,3 +93,5 @@ profile gdm-xsession @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gdm-xsession>
|
include if exists <local/gdm-xsession>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -40,3 +40,5 @@ profile gio-launch-desktop @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gio-launch-desktop>
|
include if exists <local/gio-launch-desktop>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -90,3 +90,5 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gjs-console>
|
include if exists <local/gjs-console>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -15,4 +15,6 @@ profile gkbd-keyboard-display @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
include if exists <local/gkbd-keyboard-display>
|
include if exists <local/gkbd-keyboard-display>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -24,4 +24,6 @@ profile gnome-browser-connector-host @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/mounts r,
|
owner @{PROC}/@{pid}/mounts r,
|
||||||
|
|
||||||
include if exists <local/gnome-browser-connector-host>
|
include if exists <local/gnome-browser-connector-host>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -22,4 +22,6 @@ profile gnome-calculator @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
include if exists <local/gnome-calculator>
|
include if exists <local/gnome-calculator>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -28,3 +28,5 @@ profile gnome-calculator-search-provider @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-calculator-search-provider>
|
include if exists <local/gnome-calculator-search-provider>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -46,3 +46,5 @@ profile gnome-calendar @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-calendar>
|
include if exists <local/gnome-calendar>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -32,4 +32,6 @@ profile gnome-characters @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
||||||
|
|
||||||
include if exists <local/gnome-characters>
|
include if exists <local/gnome-characters>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -24,4 +24,6 @@ profile gnome-characters-backgroudservice @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
||||||
|
|
||||||
include if exists <local/gnome-characters-backgroudservice>
|
include if exists <local/gnome-characters-backgroudservice>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -21,4 +21,6 @@ profile gnome-clocks @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
include if exists <local/gnome-clocks>
|
include if exists <local/gnome-clocks>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -32,3 +32,5 @@ profile gnome-contacts @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-contacts>
|
include if exists <local/gnome-contacts>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -29,3 +29,5 @@ profile gnome-contacts-search-provider @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-contacts-search-provider>
|
include if exists <local/gnome-contacts-search-provider>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -197,3 +197,5 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gnome-control-center>
|
include if exists <local/gnome-control-center>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -65,3 +65,5 @@ profile gnome-control-center-goa-helper @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-control-center-goa-helper>
|
include if exists <local/gnome-control-center-goa-helper>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -27,3 +27,5 @@ profile gnome-control-center-print-renderer @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-control-center-print-renderer>
|
include if exists <local/gnome-control-center-print-renderer>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -25,3 +25,5 @@ profile gnome-control-center-search-provider @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-control-center-search-provider>
|
include if exists <local/gnome-control-center-search-provider>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -28,4 +28,6 @@ profile gnome-desktop-thumbnailers flags=(attach_disconnected) {
|
||||||
owner @{tmp}/gsf-thumbnailer-@{rand6} rw,
|
owner @{tmp}/gsf-thumbnailer-@{rand6} rw,
|
||||||
|
|
||||||
include if exists <local/gnome-desktop-thumbnailers>
|
include if exists <local/gnome-desktop-thumbnailers>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -25,4 +25,6 @@ profile gnome-disk-image-mounter @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/mountinfo r,
|
owner @{PROC}/@{pid}/mountinfo r,
|
||||||
|
|
||||||
include if exists <local/gnome-disk-image-mounter>
|
include if exists <local/gnome-disk-image-mounter>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -27,4 +27,6 @@ profile gnome-disks @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/cgroup r,
|
owner @{PROC}/@{pid}/cgroup r,
|
||||||
|
|
||||||
include if exists <local/gnome-disks>
|
include if exists <local/gnome-disks>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -74,3 +74,5 @@ profile gnome-extension-ding @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-extension-ding>
|
include if exists <local/gnome-extension-ding>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -74,3 +74,5 @@ profile gnome-extension-gsconnect @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-extension-gsconnect>
|
include if exists <local/gnome-extension-gsconnect>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -37,4 +37,6 @@ profile gnome-extension-manager @{exec_path} {
|
||||||
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
||||||
|
|
||||||
include if exists <local/gnome-extension-manager>
|
include if exists <local/gnome-extension-manager>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -28,4 +28,6 @@ profile gnome-extensions-app @{exec_path} {
|
||||||
/dev/tty rw,
|
/dev/tty rw,
|
||||||
|
|
||||||
include if exists <local/gnome-extensions-app>
|
include if exists <local/gnome-extensions-app>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -26,4 +26,6 @@ profile gnome-firmware @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
include if exists <local/gnome-firmware>
|
include if exists <local/gnome-firmware>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -85,4 +85,6 @@ profile gnome-initial-setup @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/cgroup r,
|
owner @{PROC}/@{pid}/cgroup r,
|
||||||
|
|
||||||
include if exists <local/gnome-initial-setup>
|
include if exists <local/gnome-initial-setup>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -63,3 +63,5 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gnome-keyring-daemon>
|
include if exists <local/gnome-keyring-daemon>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -27,4 +27,6 @@ profile gnome-logs @{exec_path} {
|
||||||
/{run,var}/log/journal/remote/ r,
|
/{run,var}/log/journal/remote/ r,
|
||||||
|
|
||||||
include if exists <local/gnome-logs>
|
include if exists <local/gnome-logs>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -47,4 +47,6 @@ profile gnome-maps @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
||||||
|
|
||||||
include if exists <local/gnome-maps>
|
include if exists <local/gnome-maps>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -56,4 +56,6 @@ profile gnome-music @{exec_path} flags=(attach_disconnected) {
|
||||||
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
||||||
|
|
||||||
include if exists <local/gnome-music>
|
include if exists <local/gnome-music>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -25,4 +25,6 @@ profile gnome-photos-thumbnailer @{exec_path} {
|
||||||
owner /dev/shm/DzlCounters-@{int} rw,
|
owner /dev/shm/DzlCounters-@{int} rw,
|
||||||
|
|
||||||
include if exists <local/gnome-photos-thumbnailer>
|
include if exists <local/gnome-photos-thumbnailer>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -26,4 +26,6 @@ profile gnome-recipes @{exec_path} {
|
||||||
@{bin}/tar rix,
|
@{bin}/tar rix,
|
||||||
|
|
||||||
include if exists <local/gnome-recipes>
|
include if exists <local/gnome-recipes>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -30,3 +30,5 @@ profile gnome-remote-desktop-daemon @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-remote-desktop-daemon>
|
include if exists <local/gnome-remote-desktop-daemon>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -72,4 +72,6 @@ profile gnome-session @{exec_path} {
|
||||||
}
|
}
|
||||||
|
|
||||||
include if exists <local/gnome-session>
|
include if exists <local/gnome-session>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -162,3 +162,5 @@ profile gnome-session-binary @{exec_path} flags=(attach_disconnected) {
|
||||||
include if exists <usr/gnome-session-binary.d>
|
include if exists <usr/gnome-session-binary.d>
|
||||||
include if exists <local/gnome-session-binary>
|
include if exists <local/gnome-session-binary>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -32,3 +32,5 @@ profile gnome-session-ctl @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-session-ctl>
|
include if exists <local/gnome-session-ctl>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -416,3 +416,5 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {
|
||||||
|
|
||||||
include if exists <local/gnome-shell>
|
include if exists <local/gnome-shell>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -43,3 +43,5 @@ profile gnome-shell-calendar-server @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-shell-calendar-server>
|
include if exists <local/gnome-shell-calendar-server>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -20,3 +20,5 @@ profile gnome-shell-hotplug-sniffer @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-shell-hotplug-sniffer>
|
include if exists <local/gnome-shell-hotplug-sniffer>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -19,4 +19,6 @@ profile gnome-shell-overrides-migration @{exec_path} {
|
||||||
owner @{user_share_dirs}/gnome-shell/gnome-overrides-migrated rw,
|
owner @{user_share_dirs}/gnome-shell/gnome-overrides-migrated rw,
|
||||||
|
|
||||||
include if exists <local/gnome-shell-overrides-migration>
|
include if exists <local/gnome-shell-overrides-migration>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -155,3 +155,5 @@ profile gnome-software @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-software>
|
include if exists <local/gnome-software>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -88,3 +88,5 @@ profile gnome-system-monitor @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gnome-system-monitor>
|
include if exists <local/gnome-system-monitor>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -65,3 +65,5 @@ profile gnome-terminal-server @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gnome-terminal-server>
|
include if exists <local/gnome-terminal-server>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -24,4 +24,6 @@ profile gnome-text-editor @{exec_path} {
|
||||||
deny @{user_share_dirs}/gvfs-metadata/* r,
|
deny @{user_share_dirs}/gvfs-metadata/* r,
|
||||||
|
|
||||||
include if exists <local/gnome-text-editor>
|
include if exists <local/gnome-text-editor>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -15,4 +15,6 @@ profile gnome-tour @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
include if exists <local/gnome-tour>
|
include if exists <local/gnome-tour>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -43,4 +43,6 @@ profile gnome-tweaks @{exec_path} {
|
||||||
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
deny owner @{user_share_dirs}/gvfs-metadata/{,*} r,
|
||||||
|
|
||||||
include if exists <local/gnome-tweaks>
|
include if exists <local/gnome-tweaks>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -34,4 +34,6 @@ profile gnome-weather @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
owner @{PROC}/@{pid}/task/@{tid}/stat r,
|
||||||
|
|
||||||
include if exists <local/gnome-weather>
|
include if exists <local/gnome-weather>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -50,3 +50,5 @@ profile goa-daemon @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/goa-daemon>
|
include if exists <local/goa-daemon>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -29,3 +29,5 @@ profile goa-identity-service @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/goa-identity-service>
|
include if exists <local/goa-identity-service>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -35,3 +35,5 @@ profile gsd-a11y-settings @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-a11y-settings>
|
include if exists <local/gsd-a11y-settings>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -51,3 +51,5 @@ profile gsd-color @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-color>
|
include if exists <local/gsd-color>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -40,3 +40,5 @@ profile gsd-datetime @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-datetime>
|
include if exists <local/gsd-datetime>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -24,3 +24,5 @@ profile gsd-disk-utility-notify @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gsd-disk-utility-notify>
|
include if exists <local/gsd-disk-utility-notify>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -50,3 +50,5 @@ profile gsd-housekeeping @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-housekeeping>
|
include if exists <local/gsd-housekeeping>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -41,3 +41,5 @@ profile gsd-keyboard @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-keyboard>
|
include if exists <local/gsd-keyboard>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -113,3 +113,5 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-media-keys>
|
include if exists <local/gsd-media-keys>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -89,3 +89,5 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-power>
|
include if exists <local/gsd-power>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -42,3 +42,5 @@ profile gsd-print-notifications @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-print-notifications>
|
include if exists <local/gsd-print-notifications>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -33,3 +33,5 @@ profile gsd-printer @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-printer>
|
include if exists <local/gsd-printer>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -39,3 +39,5 @@ profile gsd-rfkill @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-rfkill>
|
include if exists <local/gsd-rfkill>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -28,3 +28,5 @@ profile gsd-screensaver-proxy @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-screensaver-proxy>
|
include if exists <local/gsd-screensaver-proxy>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -47,3 +47,5 @@ profile gsd-sharing @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-sharing>
|
include if exists <local/gsd-sharing>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -42,3 +42,5 @@ profile gsd-smartcard @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-smartcard>
|
include if exists <local/gsd-smartcard>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -40,3 +40,5 @@ profile gsd-sound @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-sound>
|
include if exists <local/gsd-sound>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -20,3 +20,5 @@ profile gsd-usb-protection @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gsd-usb-protection>
|
include if exists <local/gsd-usb-protection>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -36,3 +36,5 @@ profile gsd-wacom @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/gsd-wacom>
|
include if exists <local/gsd-wacom>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -17,4 +17,6 @@ profile gsd-wwan @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
include if exists <local/gsd-wwan>
|
include if exists <local/gsd-wwan>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -87,3 +87,5 @@ profile gsd-xsettings @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gsd-xsettings>
|
include if exists <local/gsd-xsettings>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -43,4 +43,6 @@ profile kgx @{exec_path} {
|
||||||
/dev/ptmx rw,
|
/dev/ptmx rw,
|
||||||
|
|
||||||
include if exists <local/kgx>
|
include if exists <local/kgx>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -56,4 +56,6 @@ profile loupe @{exec_path} flags=(attach_disconnected) {
|
||||||
}
|
}
|
||||||
|
|
||||||
include if exists <local/loupe>
|
include if exists <local/loupe>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -37,3 +37,5 @@ profile mutter-x11-frames @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/mutter-x11-frames>
|
include if exists <local/mutter-x11-frames>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -120,3 +120,5 @@ profile nautilus @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/nautilus>
|
include if exists <local/nautilus>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -52,4 +52,6 @@ profile org.gnome.NautilusPreviewer @{exec_path} {
|
||||||
/dev/media@{int} r,
|
/dev/media@{int} r,
|
||||||
|
|
||||||
include if exists <local/org.gnome.NautilusPreviewer>
|
include if exists <local/org.gnome.NautilusPreviewer>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -44,3 +44,5 @@ profile seahorse @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/seahorse>
|
include if exists <local/seahorse>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -21,4 +21,6 @@ profile session-migration @{exec_path} {
|
||||||
owner @{user_share_dirs}/session_migration-* rw,
|
owner @{user_share_dirs}/session_migration-* rw,
|
||||||
|
|
||||||
include if exists <local/session-migration>
|
include if exists <local/session-migration>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -86,3 +86,5 @@ profile tracker-extract @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/tracker-extract>
|
include if exists <local/tracker-extract>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -94,3 +94,5 @@ profile tracker-miner @{exec_path} flags=(attach_disconnected) {
|
||||||
|
|
||||||
include if exists <local/tracker-miner>
|
include if exists <local/tracker-miner>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -17,4 +17,6 @@ profile tracker-writeback @{exec_path} {
|
||||||
@{exec_path} mr,
|
@{exec_path} mr,
|
||||||
|
|
||||||
include if exists <local/tracker-writeback>
|
include if exists <local/tracker-writeback>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -36,4 +36,6 @@ profile yelp @{exec_path} {
|
||||||
owner @{PROC}/@{pid}/statm r,
|
owner @{PROC}/@{pid}/statm r,
|
||||||
|
|
||||||
include if exists <local/yelp>
|
include if exists <local/yelp>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -43,3 +43,5 @@ profile dirmngr @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/dirmngr>
|
include if exists <local/dirmngr>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -71,3 +71,5 @@ profile gpg @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gpg>
|
include if exists <local/gpg>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -91,3 +91,5 @@ profile gpg-agent @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gpg-agent>
|
include if exists <local/gpg-agent>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -29,3 +29,5 @@ profile gpg-connect-agent @{exec_path} {
|
||||||
include if exists <local/gpg-connect-agent>
|
include if exists <local/gpg-connect-agent>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
|
@ -45,3 +45,5 @@ profile gpgconf @{exec_path} {
|
||||||
|
|
||||||
include if exists <local/gpgconf>
|
include if exists <local/gpgconf>
|
||||||
}
|
}
|
||||||
|
|
||||||
|
# vim:syntax=apparmor
|
||||||
|
|
Some files were not shown because too many files have changed in this diff Show more
Loading…
Reference in a new issue