apparmor/profiles/apparmor.d/abstractions/recent-documents-write

# vim:syntax=apparmor
# Allow updating recent documents

  abi <abi/3.0>,

  # User files

  owner @{HOME}/.local/share/RecentDocuments/ rw,
  owner @{HOME}/.local/share/RecentDocuments/#[0-9]* rw,
  owner @{HOME}/.local/share/RecentDocuments/*.desktop rwl -> @{HOME}/.local/share/RecentDocuments/#[0-9]*,
  owner @{HOME}/.local/share/RecentDocuments/*.lock rwk,


  # Include additions to the abstraction
  include if exists <abstractions/recent-documents-write.d>
Add recent-documents-write abstraction Add abstraction for updating recent documents list. 2018-08-07 21:30:11 +03:00			`# vim:syntax=apparmor`
			`# Allow updating recent documents`

policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> 2020-05-05 00:08:39 -07:00			`abi <abi/3.0>,`

Add recent-documents-write abstraction Add abstraction for updating recent documents list. 2018-08-07 21:30:11 +03:00			`# User files`

			`owner @{HOME}/.local/share/RecentDocuments/ rw,`
			`owner @{HOME}/.local/share/RecentDocuments/#[0-9]* rw,`
			`owner @{HOME}/.local/share/RecentDocuments/.desktop rwl -> @{HOME}/.local/share/RecentDocuments/#[0-9],`
			`owner @{HOME}/.local/share/RecentDocuments/*.lock rwk,`

Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
abstractions: remove '#' from 'include if exists' This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'. 2020-05-30 19:46:08 +02:00			`include if exists <abstractions/recent-documents-write.d>`