mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-31 23:35:03 +01:00
28 lines
No EOL
1.5 KiB
Text
28 lines
No EOL
1.5 KiB
Text
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2018-2021 Mikhail Morfikov
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
abi <abi/3.0>,
|
|
|
|
owner @{user_cache_dirs}/fontconfig/ rw,
|
|
owner @{user_cache_dirs}/fontconfig/CACHEDIR.TAG{,.NEW,.LCK,.TMP-*} rw,
|
|
owner @{user_cache_dirs}/fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rwk,
|
|
|
|
owner @{HOME}/.fontconfig/ rw,
|
|
owner @{HOME}/.fontconfig/CACHEDIR.TAG{,.NEW,.LCK,.TMP-*} rw,
|
|
owner @{HOME}/.fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rwk,
|
|
|
|
# This is to create .uuid file containing an UUID at a font directory. The UUID will be used to
|
|
# identify the font directory and is used to determine the cache filename if available.
|
|
owner /usr/local/share/fonts/.uuid{,.NEW,.LCK,.TMP-*} rw,
|
|
link /usr/local/share/fonts/.uuid.LCK -> /usr/local/share/fonts/.uuid.TMP-*,
|
|
/usr/share/**/.uuid{,.NEW,.LCK,.TMP-*} r,
|
|
deny /usr/share/**/.uuid{,.NEW,.LCK,.TMP-*} w,
|
|
|
|
# For Google Fonts downloaded via font-manager (###FIXME### when they fix resolving of vars)
|
|
owner "@{user_share_dirs}/fonts/Google Fonts/.uuid{,.NEW,.LCK,.TMP-*}" rw,
|
|
link "@{user_share_dirs}/fonts/Google Fonts/.uuid.LCK" -> "/home/*/.local/share/fonts/Google Fonts/.uuid.TMP-*",
|
|
owner "@{user_share_dirs}/fonts/Google Fonts/**/.uuid{,.NEW,.LCK,.TMP-*}" rw,
|
|
link "@{user_share_dirs}/fonts/Google Fonts/**/.uuid.LCK" -> "/home/*/.local/share/fonts/Google Fonts/**/.uuid.TMP-*",
|
|
|
|
include if exists <abstractions/fontconfig-cache-write.d> |