mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-18 08:58:15 +01:00
feat(profile): modernise the calibre profile.
This commit is contained in:
parent
796cf32076
commit
dd06e3da65
1 changed files with 15 additions and 44 deletions
|
@ -15,27 +15,28 @@ include <tunables/global>
|
||||||
@{exec_path} += @{bin}/web2disk
|
@{exec_path} += @{bin}/web2disk
|
||||||
profile calibre @{exec_path} {
|
profile calibre @{exec_path} {
|
||||||
include <abstractions/base>
|
include <abstractions/base>
|
||||||
include <abstractions/opencl-intel>
|
include <abstractions/bus/atspi>
|
||||||
include <abstractions/gtk>
|
include <abstractions/chromium-common>
|
||||||
include <abstractions/fonts>
|
include <abstractions/dbus-accessibility-strict>
|
||||||
|
include <abstractions/dbus-session-strict>
|
||||||
|
include <abstractions/devices-usb>
|
||||||
include <abstractions/fontconfig-cache-read>
|
include <abstractions/fontconfig-cache-read>
|
||||||
|
include <abstractions/fonts>
|
||||||
include <abstractions/freedesktop.org>
|
include <abstractions/freedesktop.org>
|
||||||
|
include <abstractions/gtk>
|
||||||
include <abstractions/mesa>
|
include <abstractions/mesa>
|
||||||
|
include <abstractions/nameservice-strict>
|
||||||
|
include <abstractions/nvidia>
|
||||||
|
include <abstractions/opencl-intel>
|
||||||
|
include <abstractions/openssl>
|
||||||
|
include <abstractions/python>
|
||||||
include <abstractions/qt5-compose-cache-write>
|
include <abstractions/qt5-compose-cache-write>
|
||||||
include <abstractions/qt5-settings-write>
|
include <abstractions/qt5-settings-write>
|
||||||
include <abstractions/qt5-shader-cache>
|
include <abstractions/qt5-shader-cache>
|
||||||
include <abstractions/thumbnails-cache-read>
|
|
||||||
include <abstractions/user-download-strict>
|
|
||||||
include <abstractions/nameservice-strict>
|
|
||||||
include <abstractions/trash>
|
|
||||||
include <abstractions/python>
|
|
||||||
include <abstractions/openssl>
|
|
||||||
include <abstractions/ssl_certs>
|
include <abstractions/ssl_certs>
|
||||||
include <abstractions/devices-usb>
|
include <abstractions/thumbnails-cache-read>
|
||||||
include <abstractions/chromium-common>
|
include <abstractions/trash>
|
||||||
include <abstractions/dbus-session-strict>
|
include <abstractions/user-download-strict>
|
||||||
include <abstractions/dbus-accessibility-strict>
|
|
||||||
include <abstractions/nvidia>
|
|
||||||
|
|
||||||
capability sys_ptrace,
|
capability sys_ptrace,
|
||||||
|
|
||||||
|
@ -47,36 +48,6 @@ profile calibre @{exec_path} {
|
||||||
unix (bind, listen) type=stream addr="@*-calibre-gui.socket",
|
unix (bind, listen) type=stream addr="@*-calibre-gui.socket",
|
||||||
unix (bind) type=stream addr="@calibre-*",
|
unix (bind) type=stream addr="@calibre-*",
|
||||||
|
|
||||||
dbus send bus=accessibility path=/org/a11y/atspi/accessible/root
|
|
||||||
interface=org.a11y.atspi.Socket
|
|
||||||
member=Embed
|
|
||||||
peer=(name=org.a11y.atspi.Registry, label=at-spi2-registryd),
|
|
||||||
|
|
||||||
dbus receive bus=accessibility path=/org/a11y/atspi/accessible/root
|
|
||||||
interface=org.freedesktop.DBus.Properties
|
|
||||||
member=Set
|
|
||||||
peer=(name=:*),
|
|
||||||
|
|
||||||
dbus send bus=accessibility path=/org/a11y/atspi/registry
|
|
||||||
interface=org.a11y.atspi.Registry
|
|
||||||
member=GetRegisteredEvents
|
|
||||||
peer=(name=org.a11y.atspi.Registry, label=at-spi2-registryd),
|
|
||||||
|
|
||||||
dbus receive bus=accessibility path=/org/a11y/atspi/registry
|
|
||||||
interface=org.a11y.atspi.Registry
|
|
||||||
member=EventListenerDeregistered
|
|
||||||
peer=(name=:*, label=at-spi2-registryd),
|
|
||||||
|
|
||||||
dbus send bus=accessibility path=/org/a11y/atspi/registry/deviceeventcontroller
|
|
||||||
interface=org.a11y.atspi.DeviceEventController
|
|
||||||
member={GetKeystrokeListeners,GetDeviceEventListeners}
|
|
||||||
peer=(name=org.a11y.atspi.Registry, label=at-spi2-registryd),
|
|
||||||
|
|
||||||
dbus send bus=session path=/org/a11y/bus
|
|
||||||
interface=org.freedesktop.DBus.Properties
|
|
||||||
member=Get
|
|
||||||
peer=(name=org.a11y.Bus),
|
|
||||||
|
|
||||||
dbus send bus=session path=/org/gtk/vfs/mounttracker
|
dbus send bus=session path=/org/gtk/vfs/mounttracker
|
||||||
interface=org.gtk.vfs.MountTracker
|
interface=org.gtk.vfs.MountTracker
|
||||||
member=ListMountableInfo
|
member=ListMountableInfo
|
||||||
|
|
Loading…
Reference in a new issue