apparmor.d/apparmor.d/profiles-s-z/spice-vdagent
2022-06-13 22:04:12 +01:00

30 lines
702 B
Plaintext

# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2022 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/spice-vdagent
profile spice-vdagent @{exec_path} {
include <abstractions/base>
include <abstractions/audio>
include <abstractions/dbus-session-strict>
include <abstractions/gtk>
include <abstractions/X-strict>
@{exec_path} mr,
/etc/pipewire/client.conf r,
owner @{user_config_dirs}/user-dirs.dirs r,
@{run}/spice-vdagentd/spice-vdagent-sock rw,
@{sys}/devices/pci[0-9]*/**/{device,vendor} r,
/dev/dri/card[0-9]* rw,
include if exists <local/spice-vdagent>
}