mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-06 17:31:01 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/profiles/apparmor.d/abstractions/user-download

30 lines
987 B
Text
Raw Normal View History

Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
# ------------------------------------------------------------------
#
# Copyright (C) 2002-2006 Novell/SUSE
Update abstractions to use new XDG_*_DIR values. Thanks to Christian Boltz for the suggestion to use @{XDG_DOWNLOAD_DIR} in abstractions/user-download as well as the existing entries. Acked-By: Jamie Strandboge <jamie@canonical.com> Acked-By: Christian Boltz <apparmor@cboltz.de>
2014-02-14 16:28:16 -06:00
# Copyright (C) 2014 Canonical Ltd.
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of version 2 of the GNU General Public
# License published by the Free Software Foundation.
#
# ------------------------------------------------------------------
policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>
2020-05-05 00:08:39 -07:00
abi <abi/3.0>,
Import the rest of the core functionality of the internal apparmor development tree (trunk branch). From svn repo version 6381.
2006-04-11 21:52:54 +00:00
# Description: Where common programs should allow users to download
# files
abstractions/user-download: - fix typo for Desktop (should be Desktop/) - require owner match - allow writes to @{HOME}/[dD]ownload{,s}
2010-12-22 16:52:13 -06:00
owner @{HOME}/tmp/** rwl,
owner @{HOME}/[dD]ownload{,s}/ r,
owner @{HOME}/[dD]ownload{,s}/** rwl,
fix user_download abstraction for non-latin file names
2017-06-24 18:12:22 +03:00
owner @{HOME}/[^.]* rwl,
Update abstractions to use new XDG_*_DIR values. Thanks to Christian Boltz for the suggestion to use @{XDG_DOWNLOAD_DIR} in abstractions/user-download as well as the existing entries. Acked-By: Jamie Strandboge <jamie@canonical.com> Acked-By: Christian Boltz <apparmor@cboltz.de>
2014-02-14 16:28:16 -06:00
owner @{HOME}/@{XDG_DESKTOP_DIR}/ r,
owner @{HOME}/@{XDG_DESKTOP_DIR}/* rwl,
owner @{HOME}/@{XDG_DOWNLOAD_DIR}/ r,
owner @{HOME}/@{XDG_DOWNLOAD_DIR}/* rwl,
abstractions/user-download: - fix typo for Desktop (should be Desktop/) - require owner match - allow writes to @{HOME}/[dD]ownload{,s}
2010-12-22 16:52:13 -06:00
owner "@{HOME}/My Downloads/" r,
owner "@{HOME}/My Downloads/**" rwl,
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com>
2019-01-24 03:03:11 -08:00
# Include additions to the abstraction
abstractions: remove '#' from 'include if exists' This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'.
2020-05-30 19:46:08 +02:00
include if exists <abstractions/user-download.d>
Reference in a new issue Copy permalink