mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 17:08:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fix support for Qt5CT and Qt6CT in profiles-s-z

Browse source 
This fix the next apps/binaries

*smplayer
*smtube
*strawberry
*thunderbird
*transmission-qt
*usbguard-applet-qt
*vidcutter
*vlc
*wpa-gui
This commit is contained in:
Jose Maldonado aka Yukiteru 2024-04-25 23:47:12 -04:00 committed by Alex
parent 7ed52e44cd
commit df52a5aa50
9 changed files with 9 additions and 25 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/profiles-s-z/smplayer
View file

@ -19,6 +19,7 @@ profile smplayer @{exec_path} {
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/user-download-strict>
@ -45,7 +46,6 @@ profile smplayer @{exec_path} {
@{bin}/youtube-dl rPx,
@{bin}/yt-dlp rPx,
/usr/share/qt5ct/** r,
/usr/share/hwdata/pnp.ids r,
/etc/fstab r,
@ -62,7 +62,6 @@ profile smplayer @{exec_path} {
owner @{user_config_dirs}/smplayer/ rw,
owner @{user_config_dirs}/smplayer/* rwkl -> @{user_config_dirs}/smplayer/#@{int},
owner @{user_config_dirs}/qt5ct/{,**} r,
owner @{user_cache_dirs}/#@{int} rw,
owner /tmp/qtsingleapp-smplay-* rw,

5
apparmor.d/profiles-s-z/smtube
View file

@ -18,6 +18,7 @@ profile smtube @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/qt5-compose-cache-write>
include <abstractions/ssl_certs>
include <abstractions/gstreamer>
@ -43,10 +44,6 @@ profile smtube @{exec_path} {
owner @{user_config_dirs}/smplayer/hdpi.ini.lock rwk,
owner @{user_config_dirs}/smplayer/hdpi.ini.* rwl -> @{user_config_dirs}/smplayer/#@{int},
# To configure Qt5 settings (theme, font, icons, etc.) under DE/WM without Qt integration
owner @{user_config_dirs}/qt5ct/{,**} r,
/usr/share/qt5ct/** r,
# Cache
owner @{user_cache_dirs}/ rw,
owner @{user_cache_dirs}/smtube/ rw,

4
apparmor.d/profiles-s-z/strawberry
View file

@ -19,6 +19,7 @@ profile strawberry @{exec_path} {
include <abstractions/dri-enumerate>
include <abstractions/mesa>
include <abstractions/audio-client>
include <abstractions/qt5>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/nameservice-strict>
@ -65,9 +66,6 @@ profile strawberry @{exec_path} {
owner @{user_cache_dirs}/xine-lib/ rw,
owner @{user_cache_dirs}/xine-lib/plugins.cache{,.new} rw,
owner @{user_config_dirs}/qt5ct/{,**} r,
/usr/share/qt5ct/** r,
owner @{PROC}/@{pid}/mountinfo r,
owner @{PROC}/@{pid}/mounts r,
deny owner @{PROC}/@{pid}/cmdline r,

3
apparmor.d/profiles-s-z/thunderbird
View file

@ -27,6 +27,7 @@ profile thunderbird @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/ssl_certs>
include <abstractions/thumbnails-cache-read>
include <abstractions/uim>
@ -93,7 +94,6 @@ profile thunderbird @{exec_path} {
/usr/share/gvfs/remote-volume-monitors/{,*} r,
/usr/share/lightning/{,**} r,
/usr/share/mozilla/extensions/{,**} r,
/usr/share/qt5ct/** r,
/usr/share/xul-ext/kwallet5/* r,
/etc/@{name}/{,**} r,
@ -109,7 +109,6 @@ profile thunderbird @{exec_path} {
owner @{user_config_dirs}/kwalletrc r,
owner @{user_config_dirs}/mimeapps.list.* rw,
owner @{user_config_dirs}/qt5ct/{,**} r,
owner @{user_mail_dirs}/ rw,
owner @{user_mail_dirs}/** rwl -> @{user_mail_dirs}/**,

5
apparmor.d/profiles-s-z/transmission-qt
View file

@ -15,6 +15,7 @@ profile transmission-qt @{exec_path} {
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/private-files-strict>
include <abstractions/qt5>
include <abstractions/qt5-settings-write>
include <abstractions/ssl_certs>
include <abstractions/user-download-strict>
@ -47,10 +48,6 @@ profile transmission-qt @{exec_path} {
@{PROC}/@{pid}/net/route r,
@{PROC}/sys/kernel/random/uuid r,
# To configure Qt5 settings (theme, font, icons, etc.) under DE/WM without Qt integration
owner @{user_config_dirs}/qt5ct/{,**} r,
/usr/share/qt5ct/** r,
/usr/share/hwdata/pnp.ids r,
include if exists <local/transmission-qt>

5
apparmor.d/profiles-s-z/usbguard-applet-qt
View file

@ -16,6 +16,7 @@ profile usbguard-applet-qt @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/qt5>
include <abstractions/qt5-compose-cache-write>
include <abstractions/dri-enumerate>
include <abstractions/nameservice-strict>
@ -39,10 +40,6 @@ profile usbguard-applet-qt @{exec_path} {
/usr/share/hwdata/pnp.ids r,
# To configure Qt5 settings (theme, font, icons, etc.) under DE/WM without Qt integration
owner @{user_config_dirs}/qt5ct/{,**} r,
/usr/share/qt5ct/** r,
/var/lib/dbus/machine-id r,
/etc/machine-id r,

3
apparmor.d/profiles-s-z/vidcutter
View file

@ -17,6 +17,7 @@ profile vidcutter @{exec_path} {
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/python>
include <abstractions/qt5>
include <abstractions/qt5-compose-cache-write>
include <abstractions/qt5-settings-write>
include <abstractions/qt5-shader-cache>
@ -50,8 +51,6 @@ profile vidcutter @{exec_path} {
owner @{user_config_dirs}/vidcutter/ rw,
owner @{user_config_dirs}/vidcutter/* rwkl -> @{user_config_dirs}/vidcutter/#@{int},
owner @{user_config_dirs}/qt5ct/{,**} r,
owner /tmp/vidcutter-@{uuid} w,
owner /tmp/#@{int} rw,
owner /tmp/*.jpg rwl -> /tmp/#@{int},

2
apparmor.d/profiles-s-z/vlc
View file

@ -26,6 +26,7 @@ profile vlc @{exec_path} {
include <abstractions/gstreamer>
include <abstractions/ibus>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/ssl_certs>
include <abstractions/user-download-strict>
@ -56,7 +57,6 @@ profile vlc @{exec_path} {
owner @{user_cache_dirs}/vlc/ rw,
owner @{user_cache_dirs}/vlc/{,**} rw,
owner @{user_config_dirs}/qt5ct/{,**} r,
owner @{user_config_dirs}/vlc/ rw,
owner @{user_config_dirs}/vlc/** rwkl -> @{user_config_dirs}/vlc/#@{int},

4
apparmor.d/profiles-s-z/wpa-gui
View file

@ -17,14 +17,12 @@ profile wpa-gui @{exec_path} {
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/qt5>
include <abstractions/X>
@{exec_path} mr,
/usr/share/hwdata/pnp.ids r,
/usr/share/qt5ct/** r,
owner @{user_config_dirs}/qt5ct/{,**} r,
owner /tmp/wpa_ctrl_@{pid}-[0-9] w,
owner /dev/shm/#@{int} rw,