mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2025-02-07 18:55:15 +01:00
56 lines
1.4 KiB
Text
56 lines
1.4 KiB
Text
# apparmor.d - Full set of apparmor profiles
|
|
# Copyright (C) 2017-2021 Mikhail Morfikov
|
|
# Copyright (C) 2023-2024 Alexandre Pujol <alexandre@pujol.io>
|
|
# SPDX-License-Identifier: GPL-2.0-only
|
|
|
|
abi <abi/3.0>,
|
|
|
|
include <tunables/global>
|
|
|
|
@{exec_path} = @{bin}/lightdm-gtk-greeter
|
|
profile lightdm-gtk-greeter @{exec_path} {
|
|
include <abstractions/base>
|
|
include <abstractions/dri-enumerate>
|
|
include <abstractions/fontconfig-cache-read>
|
|
include <abstractions/fonts>
|
|
include <abstractions/freedesktop.org>
|
|
include <abstractions/nameservice-strict>
|
|
include <abstractions/X>
|
|
|
|
signal (receive) set=(term, kill) peer=lightdm,
|
|
|
|
@{exec_path} mr,
|
|
|
|
@{bin}/locale rix,
|
|
|
|
@{lib}/systemd/systemd rCx -> systemd,
|
|
@{lib}/{,at-spi2{,-core}/}at-spi-bus-launcher rPx,
|
|
|
|
/usr/share/desktop-base/{,**} r,
|
|
/usr/share/lightdm/{,**} r,
|
|
/usr/share/wayland-sessions/{,*.desktop} r,
|
|
|
|
/etc/lightdm/{,**} r,
|
|
|
|
/var/lib/AccountsService/{,**} r,
|
|
/var/lib/lightdm/{,**} rw,
|
|
/var/log/lightdm/{,**} rw,
|
|
|
|
owner @{PROC}/@{pid}/fd/ r,
|
|
|
|
profile systemd {
|
|
include <abstractions/base>
|
|
include <abstractions/systemd-common>
|
|
include <abstractions/nameservice-strict>
|
|
|
|
@{lib}/systemd/systemd mr,
|
|
|
|
/etc/systemd/user.conf r,
|
|
|
|
owner @{PROC}/@{pid}/oom_score_adj r,
|
|
|
|
include if exists <local/lightdm-gtk-greeter_systemd>
|
|
}
|
|
|
|
include if exists <local/lightdm-gtk-greeter>
|
|
}
|