From f5cb901eef0ae5bef6af9a1adaca91dd0fd86e05 Mon Sep 17 00:00:00 2001 From: Alexandre Pujol Date: Mon, 28 Nov 2022 18:08:01 +0000 Subject: [PATCH] feat(profiles): new wayland cursor file. --- apparmor.d/groups/browsers/chromium-chromium | 2 ++ apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk | 1 + apparmor.d/groups/gnome/gnome-terminal-server | 1 + apparmor.d/groups/gnome/gsd-color | 1 + apparmor.d/groups/gnome/gsd-keyboard | 1 + apparmor.d/groups/gnome/gsd-media-keys | 2 +- apparmor.d/groups/gnome/gsd-power | 1 + apparmor.d/groups/gnome/gsd-wacom | 1 + apparmor.d/groups/gnome/gsd-xsettings | 1 + 9 files changed, 10 insertions(+), 1 deletion(-) diff --git a/apparmor.d/groups/browsers/chromium-chromium b/apparmor.d/groups/browsers/chromium-chromium index d3405bc1..c7a9008d 100644 --- a/apparmor.d/groups/browsers/chromium-chromium +++ b/apparmor.d/groups/browsers/chromium-chromium @@ -109,6 +109,8 @@ profile chromium-chromium @{exec_path} flags=(attach_disconnected) { # owner @{HOME}/.mozilla/firefox/*/{cert9,key4}.db rwk, # owner @{HOME}/.mozilla/firefox/*/logins.json r, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, + owner /tmp/tmp.*/ rw, owner /tmp/tmp.*/** rwk, owner /tmp/scoped_dir*/{,**} rw, diff --git a/apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk b/apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk index 70afe9b0..00e1c454 100644 --- a/apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk +++ b/apparmor.d/groups/freedesktop/xdg-desktop-portal-gtk @@ -160,6 +160,7 @@ profile xdg-desktop-portal-gtk @{exec_path} { owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[0-9A-Z]* rw, owner @{run}/user/@{uid}/wayland-[0-9]* rw, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, @{run}/mount/utab r, owner @{PROC}/@{pid}/mountinfo r, diff --git a/apparmor.d/groups/gnome/gnome-terminal-server b/apparmor.d/groups/gnome/gnome-terminal-server index f53ebdd0..9edd64f3 100644 --- a/apparmor.d/groups/gnome/gnome-terminal-server +++ b/apparmor.d/groups/gnome/gnome-terminal-server @@ -45,6 +45,7 @@ profile gnome-terminal-server @{exec_path} { owner @{run}/user/@{uid}/gdm/Xauthority r, owner @{run}/user/@{uid}/wayland-[0-9]* rw, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, owner /tmp/#[0-9]* rw, diff --git a/apparmor.d/groups/gnome/gsd-color b/apparmor.d/groups/gnome/gsd-color index c4226e3b..a09bc379 100644 --- a/apparmor.d/groups/gnome/gsd-color +++ b/apparmor.d/groups/gnome/gsd-color @@ -135,6 +135,7 @@ profile gsd-color @{exec_path} flags=(attach_disconnected) { owner @{run}/user/@{uid}/gdm/Xauthority r, owner @{run}/user/@{uid}/wayland-[0-9] rw, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, owner /dev/tty[0-9]* rw, diff --git a/apparmor.d/groups/gnome/gsd-keyboard b/apparmor.d/groups/gnome/gsd-keyboard index ccc48d84..339e23b3 100644 --- a/apparmor.d/groups/gnome/gsd-keyboard +++ b/apparmor.d/groups/gnome/gsd-keyboard @@ -109,6 +109,7 @@ profile gsd-keyboard @{exec_path} flags=(attach_disconnected) { owner @{run}/user/@{uid}/gdm/Xauthority r, owner @{run}/user/@{uid}/wayland-[0-9] rw, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, owner /dev/tty[0-9]* rw, diff --git a/apparmor.d/groups/gnome/gsd-media-keys b/apparmor.d/groups/gnome/gsd-media-keys index 81b73a7e..9a3dc701 100644 --- a/apparmor.d/groups/gnome/gsd-media-keys +++ b/apparmor.d/groups/gnome/gsd-media-keys @@ -177,7 +177,7 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) { owner @{run}/user/@{uid}/gdm/Xauthority r, owner @{run}/user/@{uid}/wayland-[0-9]* rw, - @{run}/systemd/inhibit/[0-9]*.ref rw, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, owner /dev/tty[0-9]* rw, diff --git a/apparmor.d/groups/gnome/gsd-power b/apparmor.d/groups/gnome/gsd-power index f0b796ca..5a4f4cf6 100644 --- a/apparmor.d/groups/gnome/gsd-power +++ b/apparmor.d/groups/gnome/gsd-power @@ -183,6 +183,7 @@ profile gsd-power @{exec_path} flags=(attach_disconnected) { owner @{run}/user/@{uid}/gdm/Xauthority r, owner @{run}/user/@{uid}/wayland-[0-9] rw, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, @{run}/udev/data/+backlight:* r, @{run}/udev/data/+leds:*backlight* r, diff --git a/apparmor.d/groups/gnome/gsd-wacom b/apparmor.d/groups/gnome/gsd-wacom index ee545b60..4742122b 100644 --- a/apparmor.d/groups/gnome/gsd-wacom +++ b/apparmor.d/groups/gnome/gsd-wacom @@ -106,6 +106,7 @@ profile gsd-wacom @{exec_path} flags=(attach_disconnected) { owner @{run}/user/@{uid}/gdm/Xauthority r, owner @{run}/user/@{uid}/wayland-[0-9] rw, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, /var/lib/gdm{3,}/.config/dconf/user r, /var/lib/gdm{3,}/greeter-dconf-defaults r, diff --git a/apparmor.d/groups/gnome/gsd-xsettings b/apparmor.d/groups/gnome/gsd-xsettings index c196b33c..dd7478f1 100644 --- a/apparmor.d/groups/gnome/gsd-xsettings +++ b/apparmor.d/groups/gnome/gsd-xsettings @@ -142,6 +142,7 @@ profile gsd-xsettings @{exec_path} { owner @{run}/user/@{uid}/.mutter-Xwaylandauth.[a-zA-z0-9]* r, owner @{run}/user/@{uid}/gdm/Xauthority r, owner @{run}/user/@{uid}/wayland-[0-9]* rw, + owner @{run}/user/@{uid}/wayland-cursor-shared-[0-9]* rw, @{run}/systemd/sessions/* r, @{run}/systemd/users/@{uid} r,