mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-18 17:08:09 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): add some new profiles.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-15 16:21:17 +00:00
parent dd1b3b16e2
commit e3f9013c3a
Failed to generate hash of commit
5 changed files with 111 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

37
apparmor.d/groups/gnome/deja-dup-monitor Normal file
View file

@ -0,0 +1,37 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/deja-dup/deja-dup-monitor
profile deja-dup-monitor @{exec_path} {
include <abstractions/base>
include <abstractions/bus-session>
include <abstractions/bus-system>
include <abstractions/bus/net.hadess.PowerProfiles>
include <abstractions/bus/org.gtk.Private.RemoteVolumeMonitor>
include <abstractions/bus/org.gtk.vfs.Daemon>
include <abstractions/dconf-write>
network netlink raw,
# dbus: own bus=session name=org.gnome.DejaDup.Monitor
# dbus: talk bus=session name=org.gnome.DejaDup label=xdg-desktop-portal
dbus send bus=system path=/org/freedesktop/NetworkManager
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=:*, label=NetworkManager),
@{exec_path} mr,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/var/tmp/ r,
/tmp/ r,
include if exists <local/deja-dup-monitor>
}

31
apparmor.d/groups/gnome/gnome-recipes Normal file
View file

@ -0,0 +1,31 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/gnome-recipes
profile gnome-recipes @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
include <abstractions/gnome-strict>
include <abstractions/nameservice-strict>
include <abstractions/ssl_certs>
include <abstractions/p11-kit>
network inet stream,
network inet6 stream,
network netlink raw,
@{exec_path} mr,
@{bin}/tar rix,
/usr/share/gnome-recipes/{,**} r,
owner @{user_cache_dirs}/gnome-recipes/{,**} rw,
include if exists <local/gnome-recipes>
}

20
apparmor.d/groups/gnome/gnome-tour Normal file
View file

@ -0,0 +1,20 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{bin}/gnome-tour
profile gnome-tour @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
include <abstractions/gnome-strict>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
@{exec_path} mr,
include if exists <local/gnome-tour>
}

20
apparmor.d/groups/grub/grub-sort-version Normal file
View file

@ -0,0 +1,20 @@
# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = @{lib}/grub/grub-sort-version
profile grub-sort-version @{exec_path} {
include <abstractions/base>
include <abstractions/python>
include if exists <abstractions/apt-common>
capability dac_read_search,
@{exec_path} mr,
include if exists <local/grub-sort-version>
}

5
apparmor.d/groups/ubuntu/apport
View file

@ -28,8 +28,9 @@ profile apport @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr,
@{bin}/dpkg rPx,
@{bin}/gdbus rix,
@{bin}/gdbus rix,
@{bin}/dpkg rPx -> child-dpkg,
@{bin}/dpkg-divert rPx -> child-dpkg-divert,
/usr/share/apport/{,**} r,