mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 00:48:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(abs): cleanup X-strict.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-18 19:24:25 +00:00
parent 0c2b8f612b
commit df20d29832
Failed to generate hash of commit
1 changed files with 15 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
apparmor.d/abstractions/X-strict
View file

@ -3,36 +3,28 @@
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
# The unix socket to use to connect to the display # The unix socket to use to connect to the display
unix (connect, receive, send) unix (connect, receive, send) type=stream peer=(addr="@/tmp/.X11-unix/X[0-9]*"),
type=stream unix (connect, receive, send) type=stream peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
peer=(addr="@/tmp/.X11-unix/X[0-9]*"),
unix (connect, receive, send)
type=stream
peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
unix type=stream addr="@/tmp/.ICE-unix/[0-9]*", unix type=stream addr="@/tmp/.ICE-unix/[0-9]*",
unix type=stream addr="@/tmp/.X11-unix/X[0-9]*", unix type=stream addr="@/tmp/.X11-unix/X[0-9]*",
/tmp/.X11-unix/* rw,
/tmp/.ICE-unix/* rw,
/tmp/.X{0,1}-lock rw,
# Available Xsessions /usr/share/X11/{,**} r,
/usr/share/xsessions/{,*.desktop} r, /usr/share/xsessions/{,*.desktop} r, # Available Xsessions
# ICEauthority files required for X authentication, per user /etc/X11/cursors/{,**} r,
owner @{HOME}/.ICEauthority r,
owner @{run}/user/@{uid}/ICEauthority r, owner @{HOME}/.ICEauthority r, # ICEauthority files required for X authentication, per user
owner @{HOME}/.Xauthority r, # Xauthority files required for X connections, per user
# Xauthority files required for X connections, per user
owner @{HOME}/.Xauthority r, /tmp/.ICE-unix/* rw,
/tmp/.X{0,1}-lock rw,
/tmp/.X11-unix/* rw,
owner /tmp/xauth_@{rand6} rl -> /tmp/#@{int}, owner /tmp/xauth_@{rand6} rl -> /tmp/#@{int},
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} rw, # Xwayland
owner @{run}/user/@{uid}/gdm{[1-9],}/Xauthority r, owner @{run}/user/@{uid}/gdm{[1-9],}/Xauthority r,
owner @{run}/user/@{uid}/ICEauthority r,
owner @{run}/user/@{uid}/X11/Xauthority r, owner @{run}/user/@{uid}/X11/Xauthority r,
owner @{run}/user/@{uid}/xauth_@{rand6} rl -> @{run}/user/@{uid}/#@{int}, owner @{run}/user/@{uid}/xauth_@{rand6} rl -> @{run}/user/@{uid}/#@{int},
# Xwayland
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} rw,
/etc/X11/cursors/{,**} r,
/usr/share/X11/{,**} r,
include if exists <abstractions/X-strict.d> include if exists <abstractions/X-strict.d>