apparmor/profiles/apparmor.d/abstractions/ubuntu-xterm

# vim:syntax=apparmor
#
# for allowing access to xterm
#

  abi <abi/3.0>,

  include <abstractions/consoles>
  /dev/ptmx rw,
  /{,var/}run/utmp r,
  /etc/X11/app-defaults/XTerm r,

  # do not use ux or Ux here. Use at a minimum ix
  /usr/bin/xterm ix,


  # Include additions to the abstraction
  include if exists <abstractions/ubuntu-xterm.d>
update ubuntu abstractions to use '# vim:syntax=apparmor' 2010-12-21 12:53:33 -06:00			`# vim:syntax=apparmor`
merge profiles from Ubuntu, including change_hat apache2 template 2009-11-11 11:42:30 -08:00			`#`
			`# for allowing access to xterm`
			`#`

policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> 2020-05-05 00:08:39 -07:00			`abi <abi/3.0>,`

Change `#include` to `include` in abstractions and tunables 2020-06-09 23:28:41 +02:00			`include <abstractions/consoles>`
merge profiles from Ubuntu, including change_hat apache2 template 2009-11-11 11:42:30 -08:00			`/dev/ptmx rw,`
update for /var/run -> /run udev transition. For compatibility, distributions (eg Ubuntu) are providing a symlink from /var/run to /run, so our profiles should handle both situations. 2011-07-14 07:57:57 -05:00			`/{,var/}run/utmp r,`
merge profiles from Ubuntu, including change_hat apache2 template 2009-11-11 11:42:30 -08:00			`/etc/X11/app-defaults/XTerm r,`

			`# do not use ux or Ux here. Use at a minimum ix`
			`/usr/bin/xterm ix,`

Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
abstractions: remove '#' from 'include if exists' This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'. 2020-05-30 19:46:08 +02:00			`include if exists <abstractions/ubuntu-xterm.d>`