mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-01-15 08:47:48 +01:00
34 lines
1.3 KiB
Text
34 lines
1.3 KiB
Text
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2022-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
# The unix socket to use to connect to the display
|
|
unix (connect, receive, send) type=stream peer=(addr="@/tmp/.X11-unix/X[0-9]*"),
|
|
unix (connect, receive, send) type=stream peer=(addr="@/tmp/.ICE-unix/[0-9]*"),
|
|
unix type=stream addr="@/tmp/.ICE-unix/[0-9]*",
|
|
unix type=stream addr="@/tmp/.X11-unix/X[0-9]*",
|
|
|
|
/usr/share/X11/{,**} r,
|
|
/usr/share/xsessions/{,*.desktop} r, # Available Xsessions
|
|
|
|
/etc/X11/cursors/{,**} r,
|
|
|
|
owner @{HOME}/.ICEauthority rw, # ICEauthority files required for X authentication, per user
|
|
owner @{HOME}/.Xauthority rw, # Xauthority files required for X connections, per user
|
|
owner @{HOME}/.xsession-errors rw,
|
|
|
|
/tmp/.ICE-unix/* rw,
|
|
/tmp/.X@{int}-lock rw,
|
|
/tmp/.X11-unix/* rw,
|
|
owner @{tmp}/xauth_@{rand6} rl -> @{tmp}/#@{int},
|
|
|
|
owner @{run}/user/@{uid}/.mutter-Xwaylandauth.@{rand6} rw, # Xwayland
|
|
owner @{run}/user/@{uid}/gdm{[1-9],}/Xauthority r,
|
|
owner @{run}/user/@{uid}/iceauth_@{rand6} r,
|
|
owner @{run}/user/@{uid}/ICEauthority r,
|
|
owner @{run}/user/@{uid}/X11/Xauthority r,
|
|
owner @{run}/user/@{uid}/xauth_@{rand6} rl -> @{run}/user/@{uid}/#@{int},
|
|
|
|
include if exists <abstractions/X-strict.d>
|
|
|
|
# vim:syntax=apparmor
|