mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-14 23:43:56 +01:00
parent
41766ebd2a
commit
ed4bd4628a
@ -27,5 +27,3 @@
|
||||
|
||||
# Removable media's trash location when the admin doesn't create the .Trash/ folder in the top lvl dir
|
||||
owner /{media,mnt}/*/*/.Trash-[0-9]*/{,**} rwl,
|
||||
|
||||
include if exists <abstractions/trash.d>
|
@ -1,6 +1,6 @@
|
||||
# apparmor.d - Full set of apparmor profiles
|
||||
# Extended system directories definition
|
||||
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
# To allow extended personalisation without breaking everything.
|
||||
@ -30,5 +30,3 @@
|
||||
|
||||
# Integration with Ubuntu Core
|
||||
@{etc_rw}+=/etc/writable/
|
||||
|
||||
include if exists <tunables/extend.d>
|
@ -1,24 +0,0 @@
|
||||
# ------------------------------------------------------------------
|
||||
#
|
||||
# Copyright (C) 2006-2009 Novell/SUSE
|
||||
# Copyright (C) 2010-2014 Canonical Ltd.
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or
|
||||
# modify it under the terms of version 2 of the GNU General Public
|
||||
# License published by the Free Software Foundation.
|
||||
#
|
||||
# ------------------------------------------------------------------
|
||||
|
||||
# All the tunables definitions that should be available to every profile
|
||||
# should be included here
|
||||
|
||||
include <tunables/home>
|
||||
include <tunables/multiarch>
|
||||
include <tunables/proc>
|
||||
include <tunables/alias>
|
||||
include <tunables/kernelvars>
|
||||
include <tunables/xdg-user-dirs>
|
||||
include <tunables/share>
|
||||
include <tunables/etc>
|
||||
include <tunables/run>
|
||||
include <tunables/extend>
|
@ -1,6 +1,6 @@
|
||||
# apparmor.d - Full set of apparmor profiles
|
||||
# Extended user XDG directories definition
|
||||
# Copyright (C) 2021 Alexandre Pujol <alexandre@pujol.io>
|
||||
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
# To allow extended personalisation by the user without breaking everything.
|
||||
@ -9,29 +9,20 @@
|
||||
# XDG_*_DIR variables are relative pathnames from the user home directory.
|
||||
# user_*_dirs variables are absolute path.
|
||||
|
||||
# Define the common set of XDG user directories (usually defined in
|
||||
# /etc/xdg/user-dirs.defaults)
|
||||
@{XDG_DESKTOP_DIR}="Desktop"
|
||||
@{XDG_DOWNLOAD_DIR}="Downloads"
|
||||
@{XDG_TEMPLATES_DIR}="Templates"
|
||||
@{XDG_PUBLICSHARE_DIR}="Public"
|
||||
@{XDG_DOCUMENTS_DIR}="Documents"
|
||||
@{XDG_MUSIC_DIR}="Music"
|
||||
@{XDG_PICTURES_DIR}="Pictures"
|
||||
@{XDG_VIDEOS_DIR}="Videos"
|
||||
# First part, second part in /etc/apparmor.d/tunables/xdg-user-dirs.d/apparmor.d
|
||||
|
||||
# Extra user personal directories
|
||||
@{XDG_BOOKS_DIR}="Books"
|
||||
@{XDG_PROJECTS_DIR}="Projects"
|
||||
@{XDG_WORK_DIR}="Work"
|
||||
@{XDG_SCREENSHOTS_DIR}="@{XDG_PICTURES_DIR}/Screenshots"
|
||||
@{XDG_SYNC_DIR}="Sync"
|
||||
@{XDG_TORRENTS_DIR}="Torrents"
|
||||
@{XDG_GAMES_DIR}=".games"
|
||||
@{XDG_VM_DIR}=".vm"
|
||||
@{XDG_VM_SHARES_DIR}="VM_Shares"
|
||||
@{XDG_WALLPAPERS_DIR}="@{XDG_PICTURES_DIR}/Wallpapers"
|
||||
@{XDG_IMG_DIR}="images"
|
||||
@{XDG_SCREENSHOTS_DIR}="Pictures/Screenshots"
|
||||
@{XDG_WALLPAPERS_DIR}="Pictures/Wallpapers"
|
||||
|
||||
# User personal keyrings
|
||||
@{XDG_SSH_DIR}=".ssh"
|
||||
@ -61,22 +52,10 @@
|
||||
|
||||
# Other user directories
|
||||
@{user_books_dirs}=@{HOME}/@{XDG_BOOKS_DIR} @{MOUNTS}/@{XDG_BOOKS_DIR}
|
||||
@{user_documents_dirs}=@{HOME}/@{XDG_DOCUMENTS_DIR} @{MOUNTS}/@{XDG_DOCUMENTS_DIR}
|
||||
@{user_download_dirs}=@{HOME}/@{XDG_DOWNLOAD_DIR} @{MOUNTS}/@{XDG_DOWNLOAD_DIR}
|
||||
@{user_games_dirs}=@{HOME}/@{XDG_GAMES_DIR} @{MOUNTS}/@{XDG_GAMES_DIR}
|
||||
@{user_music_dirs}=@{HOME}/@{XDG_MUSIC_DIR} @{MOUNTS}/@{XDG_MUSIC_DIR}
|
||||
@{user_pictures_dirs}=@{HOME}/@{XDG_PICTURES_DIR} @{MOUNTS}/@{XDG_PICTURES_DIR}
|
||||
@{user_projects_dirs}=@{HOME}/@{XDG_PROJECTS_DIR} @{MOUNTS}/@{XDG_PROJECTS_DIR}
|
||||
@{user_publicshare_dirs}=@{HOME}/@{XDG_PUBLICSHARE_DIR} @{MOUNTS}/@{XDG_PUBLICSHARE_DIR}
|
||||
@{user_sync_dirs}=@{HOME}/@{XDG_SYNC_DIR} @{MOUNTS}/*/@{XDG_SYNC_DIR}
|
||||
@{user_templates_dirs}=@{HOME}/@{XDG_TEMPLATES_DIR} @{MOUNTS}/@{XDG_TEMPLATES_DIR}
|
||||
@{user_torrents_dirs}=@{HOME}/@{XDG_TORRENTS_DIR} @{MOUNTS}/@{XDG_TORRENTS_DIR}
|
||||
@{user_videos_dirs}=@{HOME}/@{XDG_VIDEOS_DIR} @{MOUNTS}/@{XDG_VIDEOS_DIR}
|
||||
@{user_vm_dirs}=@{HOME}/@{XDG_VM_DIR} @{MOUNTS}/@{XDG_VM_DIR}
|
||||
@{user_vm_shares}=@{HOME}/@{XDG_VM_SHARES_DIR} @{MOUNTS}/@{XDG_VM_SHARES_DIR}
|
||||
@{user_work_dirs}=@{HOME}/@{XDG_WORK_DIR} @{MOUNTS}/@{XDG_WORK_DIR}
|
||||
@{user_password_store_dirs}=@{HOME}/@{XDG_PASSWORD_STORE_DIR} @{MOUNTS}/@{XDG_PASSWORD_STORE_DIR}
|
||||
|
||||
# Also, include files in tunables/xdg-user-dirs.d for site-specific adjustments
|
||||
# to the various XDG directories
|
||||
include <tunables/xdg-user-dirs.d>
|
22
apparmor.d/tunables/xdg-user-dirs.d/apparmor.d
Normal file
22
apparmor.d/tunables/xdg-user-dirs.d/apparmor.d
Normal file
@ -0,0 +1,22 @@
|
||||
# apparmor.d - Full set of apparmor profiles
|
||||
# Extended user XDG directories definition
|
||||
# Copyright (C) 2021-2023 Alexandre Pujol <alexandre@pujol.io>
|
||||
# SPDX-License-Identifier: GPL-2.0-only
|
||||
|
||||
# To allow extended personalisation by the user without breaking everything.
|
||||
# All apparmor profiles should always use the variables defined here.
|
||||
|
||||
# XDG_*_DIR variables are relative pathnames from the user home directory.
|
||||
# user_*_dirs variables are absolute path.
|
||||
|
||||
# Second part. First part in /etc/apparmor.d/tunables/home.d/apparmor.d
|
||||
|
||||
# Other user directories
|
||||
@{user_documents_dirs}=@{HOME}/@{XDG_DOCUMENTS_DIR} @{MOUNTS}/@{XDG_DOCUMENTS_DIR}
|
||||
@{user_download_dirs}=@{HOME}/@{XDG_DOWNLOAD_DIR} @{MOUNTS}/@{XDG_DOWNLOAD_DIR}
|
||||
@{user_music_dirs}=@{HOME}/@{XDG_MUSIC_DIR} @{MOUNTS}/@{XDG_MUSIC_DIR}
|
||||
@{user_pictures_dirs}=@{HOME}/@{XDG_PICTURES_DIR} @{MOUNTS}/@{XDG_PICTURES_DIR}
|
||||
@{user_publicshare_dirs}=@{HOME}/@{XDG_PUBLICSHARE_DIR} @{MOUNTS}/@{XDG_PUBLICSHARE_DIR}
|
||||
@{user_templates_dirs}=@{HOME}/@{XDG_TEMPLATES_DIR} @{MOUNTS}/@{XDG_TEMPLATES_DIR}
|
||||
@{user_videos_dirs}=@{HOME}/@{XDG_VIDEOS_DIR} @{MOUNTS}/@{XDG_VIDEOS_DIR}
|
||||
@{user_vm_shares}=@{HOME}/@{XDG_VM_SHARES_DIR} @{MOUNTS}/@{XDG_VM_SHARES_DIR}
|
Loading…
Reference in New Issue
Block a user