mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-06 17:31:01 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/profiles/apparmor.d/abstractions/qt5-settings-write

17 lines
514 B
Text
Raw Normal View History

Add qt5-write abstraction Qt-based applications stores QFileDialog (latest browsed directory) and other shared user settings inside ~/.config/QtProject.conf. Currently available qt abstraction only allows to read it (by design), so this patch introduces abstraction that grants permissions for writing.
2018-08-05 19:16:12 +03:00
# vim:syntax=apparmor
# Allow writing shared settings for Qt-based applications
policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>
2020-05-05 00:08:39 -07:00
abi <abi/3.0>,
Add qt5-write abstraction Qt-based applications stores QFileDialog (latest browsed directory) and other shared user settings inside ~/.config/QtProject.conf. Currently available qt abstraction only allows to read it (by design), so this patch introduces abstraction that grants permissions for writing.
2018-08-05 19:16:12 +03:00
# User files
qt5-settings-write: fix anonymous shared memory access *Add anonymous shared memory access rule for QtSettings.conf file itself. * Reduce strictness of anonymous shared memory file names - numbers in them can be smaller or bigger. * Fix consistency - require anonymous shared memory file names to end with digit in all rules.
2019-01-12 12:50:19 +02:00
owner @{HOME}/.config/#[0-9]*[0-9] rw,
Refactor qt5-settings-write Merge symlink rules together with `rw` rules for brevity.
2019-01-14 19:23:49 +02:00
owner @{HOME}/.config/QtProject.conf rwl -> @{HOME}/.config/#[0-9]*[0-9],
# for temporary files like QtProject.conf.Aqrgeb
owner @{HOME}/.config/QtProject.conf.?????? rwl -> @{HOME}/.config/#[0-9]*[0-9],
Add qt5-write abstraction Qt-based applications stores QFileDialog (latest browsed directory) and other shared user settings inside ~/.config/QtProject.conf. Currently available qt abstraction only allows to read it (by design), so this patch introduces abstraction that grants permissions for writing.
2018-08-05 19:16:12 +03:00
owner @{HOME}/.config/QtProject.conf.lock rwk,
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com>
2019-01-24 03:03:11 -08:00
# Include additions to the abstraction
abstractions: remove '#' from 'include if exists' This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'.
2020-05-30 19:46:08 +02:00
include if exists <abstractions/qt5-settings-write.d>
Reference in a new issue Copy permalink