apparmor/profiles/apparmor.d/abstractions/ubuntu-feed-readers

# vim:syntax=apparmor
#
# abstraction for allowing graphical news feed readers in Ubuntu
#
# Users of this abstraction need to #include the ubuntu-helpers abstraction
# in the toplevel profile. Eg:
# #include <abstractions/ubuntu-helpers>

  abi <abi/3.0>,

  /usr/bin/akregator Cxr -> sanitized_helper,
  /usr/bin/liferea-add-feed Cxr -> sanitized_helper,

  # Include additions to the abstraction
  #include if exists <abstractions/ubuntu-feed-readers.d>
update ubuntu abstractions to use '# vim:syntax=apparmor' 2010-12-21 12:53:33 -06:00			`# vim:syntax=apparmor`
create ubuntu-feed-readers abstraction and have ubuntu-browsers.d/multimedia use it instead of specifying liferea directly 2010-08-11 09:58:34 -05:00			`#`
			`# abstraction for allowing graphical news feed readers in Ubuntu`
			`#`
don't #include ubuntu-helpers in the abstractions. This can only be included once in policy, otherwise you will get an error regarding multiple definitions for sanitized_helper 2012-01-11 09:00:35 +01:00			`# Users of this abstraction need to #include the ubuntu-helpers abstraction`
			`# in the toplevel profile. Eg:`
			`# #include <abstractions/ubuntu-helpers>`

policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> 2020-05-05 00:08:39 -07:00			`abi <abi/3.0>,`

update ubuntu abstractions to use the sanitized helper 2012-01-10 20:54:38 +01:00			`/usr/bin/akregator Cxr -> sanitized_helper,`
			`/usr/bin/liferea-add-feed Cxr -> sanitized_helper,`
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
			`#include if exists <abstractions/ubuntu-feed-readers.d>`