apparmor/profiles/apparmor.d/abstractions/ubuntu-konsole

# vim:syntax=apparmor
#
# for allowing access to konsole
#

  #include <abstractions/consoles>
  #include <abstractions/kde>
  capability sys_ptrace,
  @{PROC}/@{pid}/status r,
  @{PROC}/@{pid}/stat r,
  @{PROC}/@{pid}/cmdline r,
  /{,var/}run/utmp r,
  /dev/ptmx rw,

  # do not use ux or Ux here. Use at a minimum ix
  /usr/bin/konsole ix,


  # Include additions to the abstraction
  #include if exists <abstractions/ubuntu-konsole.d>
update ubuntu abstractions to use '# vim:syntax=apparmor' 2010-12-21 12:53:33 -06:00			`# vim:syntax=apparmor`
merge profiles from Ubuntu, including change_hat apache2 template 2009-11-11 11:42:30 -08:00			`#`
			`# for allowing access to konsole`
			`#`

			`#include <abstractions/consoles>`
			`#include <abstractions/kde>`
			`capability sys_ptrace,`
Subject: profiles - use @{pid} tunable This patch adds the kernelvars tunable to the global set that is usually included by default in apparmor policies. It then converts the rules that are intended to match /proc/pid to use this tunable. Signed-off-by: Steve Beattie <sbeattie@ubuntu.com> Acked-By: Seth Arnold <seth.arnold@canonical.com> 2013-01-02 15:34:38 -08:00			`@{PROC}/@{pid}/status r,`
			`@{PROC}/@{pid}/stat r,`
			`@{PROC}/@{pid}/cmdline r,`
update for /var/run -> /run udev transition. For compatibility, distributions (eg Ubuntu) are providing a symlink from /var/run to /run, so our profiles should handle both situations. 2011-07-14 07:57:57 -05:00			`/{,var/}run/utmp r,`
merge profiles from Ubuntu, including change_hat apache2 template 2009-11-11 11:42:30 -08:00			`/dev/ptmx rw,`

			`# do not use ux or Ux here. Use at a minimum ix`
			`/usr/bin/konsole ix,`

Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
			`#include if exists <abstractions/ubuntu-konsole.d>`