mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-29 22:35:15 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

feat(profiles): improve kde integration.

Browse source 
See #208
This commit is contained in:
Alexandre Pujol 2023-10-16 22:48:13 +01:00
parent 5f47df0b79
commit e43ce58de1
Failed to generate hash of commit
6 changed files with 23 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/akonadi/akonadi_indexing_agent
View file

@ -33,8 +33,10 @@ profile akonadi_indexing_agent @{exec_path} {
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}//#@{int} rw,
owner @{user_config_dirs}/akonadi_indexing_agentrc r,
owner @{user_config_dirs}/#@{int} rw,
owner @{user_config_dirs}/akonadi_indexing_agentrc rw,
owner @{user_config_dirs}/akonadi_indexing_agentrc.@{rand6} rwl -> @{user_config_dirs}/#@{int},
owner @{user_config_dirs}/akonadi_indexing_agentrc.lock rwk,
owner @{user_config_dirs}/akonadi/ rw,
owner @{user_config_dirs}/akonadi/** rwlk -> @{user_config_dirs}/akonadi/**,
owner @{user_config_dirs}/kdedefaults/kdeglobals r,

1
apparmor.d/groups/browsers/firefox
View file

@ -181,6 +181,7 @@ profile firefox @{exec_path} flags=(attach_disconnected) {
/etc/mailcap r,
/etc/mime.types r,
/etc/opensc.conf r,
/etc/sysconfig/proxy r,
/etc/xdg/* r,
/etc/xul-ext/kwallet5.js r,

4
apparmor.d/groups/gpg/gpg
View file

@ -45,6 +45,10 @@ profile gpg @{exec_path} {
owner /var/lib/*/.gnupg/ rw,
owner /var/lib/*/.gnupg/** rwkl -> /var/lib/*/.gnupg/**,
# TODO: Remove after zypper profile is created
owner /var/tmp/zypp.@{rand6}/ rw,
owner /var/tmp/zypp.@{rand6}/** rwkl -> /var/tmp/zypp.@{rand6}/**,
owner /tmp/ostree-gpg-*/ r,
owner /tmp/ostree-gpg-*/** rwkl -> /tmp/ostree-gpg-*/**,

3
apparmor.d/groups/gvfs/gvfsd-smb-browse
View file

@ -52,9 +52,10 @@ profile gvfsd-smb-browse @{exec_path} {
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/etc/samba/smb.conf r,
/etc/samba/* r,
/var/cache/samba/ rw,
/var/lib/samba/** rwk,
owner @{run}/samba/ rw,
owner @{run}/samba/gencache.tdb rwk,

10
apparmor.d/groups/kde/baloorunner
View file

@ -19,6 +19,13 @@ profile baloorunner @{exec_path} {
@{exec_path} mr,
/usr/share/hwdata/*.ids r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/etc/xdg/baloofilerc r,
/etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_config_dirs}/baloofilerc r,
@ -29,6 +36,9 @@ profile baloorunner @{exec_path} {
owner @{user_share_dirs}/baloo/{,**} rwk,
/tmp/ r,
/tmp/xauth_@{rand6} r,
@{PROC}/sys/kernel/core_pattern r,
include if exists <local/baloorunner>

4
apparmor.d/groups/kde/kded5
View file

@ -71,9 +71,9 @@ profile kded5 @{exec_path} {
owner @{HOME}/.gtkrc-2.0 rw,
@{user_cache_dirs}/ksycoca5_* rwlk -> @{user_cache_dirs}/#@{int},
owner @{user_cache_dirs}/#@{int} rw,
owner @{user_cache_dirs}/icon-cache.kcache rw,
owner @{user_cache_dirs}/ksycoca5_* rwlk -> @{user_cache_dirs}/#@{int},
owner @{user_config_dirs}/#@{int} rw,
owner @{user_config_dirs}/bluedevilglobalrc.lock rwk,
@ -106,10 +106,10 @@ profile kded5 @{exec_path} {
owner @{user_config_dirs}/touchpadrc r,
owner @{user_config_dirs}/xsettingsd/{,**} rw,
@{user_share_dirs}/kcookiejar/cookies{,.@{rand6}} rwkl -> @{user_share_dirs}/kcookiejar/#@{int},
owner @{user_share_dirs}/icc/{,edid-*} r,
owner @{user_share_dirs}/kcookiejar/#@{int} rw,
owner @{user_share_dirs}/kcookiejar/cookies.lock rwk,
owner @{user_share_dirs}/kcookiejar/cookies{,.@{rand6}} rwkl -> @{user_share_dirs}/kcookiejar/#@{int},
owner @{user_share_dirs}/kded5/{,**} rw,
owner @{user_share_dirs}/kscreen/{,**} rwl,
owner @{user_share_dirs}/kservices5/{,**} r,