mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-30 23:05:11 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(profile): allow drkonqi to read logs.
Some checks failed
Ubuntu / check (push) Has been cancelled
Details
Ubuntu / build (default, ubuntu-22.04) (push) Has been cancelled
Details
Ubuntu / build (default, ubuntu-24.04) (push) Has been cancelled
Details
Ubuntu / build (full-system-policy, ubuntu-22.04) (push) Has been cancelled
Details
Ubuntu / build (full-system-policy, ubuntu-24.04) (push) Has been cancelled
Details
Ubuntu / tests (push) Has been cancelled
Details

Browse source 
fix #655
This commit is contained in:
Alexandre Pujol 2025-01-26 21:17:18 +01:00
parent a68cd26d41
commit feee34ef7e
Failed to generate hash of commit
2 changed files with 18 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
apparmor.d/groups/kde/drkonqi
View file

@ -23,18 +23,35 @@ profile drkonqi @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
@{bin}/plasmashell r,
@{bin}/lsb_release rPx -> lsb_release, @{bin}/lsb_release rPx -> lsb_release,
/usr/share/drkonqi/{,**} r, /usr/share/drkonqi/{,**} r,
/etc/machine-id r,
/ r,
owner @{user_cache_dirs}/drkonqi/ rw, owner @{user_cache_dirs}/drkonqi/ rw,
owner @{user_cache_dirs}/drkonqi/** rwlk -> @{user_cache_dirs}/drkonqi/**, owner @{user_cache_dirs}/drkonqi/** rwlk -> @{user_cache_dirs}/drkonqi/**,
owner @{user_cache_dirs}/kcrash-metadata/* w, owner @{user_cache_dirs}/kcrash-metadata/* w,
owner @{user_config_dirs}/breezerc r,
owner @{user_config_dirs}/drkonqirc r, owner @{user_config_dirs}/drkonqirc r,
/{run,var}/log/journal/ r,
/{run,var}/log/journal/@{hex32}/ r,
/{run,var}/log/journal/@{hex32}/system.journal r,
/{run,var}/log/journal/@{hex32}/system@@{hex32}-@{hex16}-@{hex16}.journal* r,
/{run,var}/log/journal/@{hex32}/user-@{uid}.journal r,
/{run,var}/log/journal/@{hex32}/user-@{uid}@@{hex32}-@{hex16}-@{hex16}.journal* r,
/{run,var}/log/journal/remote/ r,
/dev/tty r, /dev/tty r,
owner @{PROC}/@{pid}/cmdline r,
owner @{PROC}/@{pid}/mountinfo r,
include if exists <local/drkonqi> include if exists <local/drkonqi>
} }

1
apparmor.d/groups/kde/drkonqi-coredump-processor
View file

@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} += @{lib}/@{multiarch}/{,libexec/}drkonqi-coredump-processor @{exec_path} += @{lib}/@{multiarch}/{,libexec/}drkonqi-coredump-processor
profile drkonqi-coredump-processor @{exec_path} { profile drkonqi-coredump-processor @{exec_path} {
include <abstractions/base> include <abstractions/base>
include <abstractions/consoles>
include <abstractions/qt5> include <abstractions/qt5>
capability dac_override, capability dac_override,