apparmor/profiles/apparmor.d/abstractions/dconf

# vim:syntax=apparmor

  abi <abi/3.0>,

# permissions for querying dconf settings; granting write access should
# be specified in a specific application's profile.

  /etc/dconf/** r,
  owner @{run}/user/*/dconf/user r,
  owner @{HOME}/.config/dconf/user r,

  # Include additions to the abstraction
  include if exists <abstractions/dconf.d>
Add dconf abstraction for querying dconf settings An abstraction to grant the ability to query dconf settings. It does not grant the ability to update or add settings, due to our current inability to restrict where within the dconf hierarchy updates can occur. From: intrigeri <intrigeri@boum.org> Acked-by: Steve Beattie <steve@nxnw.org> 2013-10-09 06:18:09 -07:00			`# vim:syntax=apparmor`

policy: tag policy with the AppArmor 3.0 abi Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com> 2020-05-05 00:08:39 -07:00			`abi <abi/3.0>,`

Add dconf abstraction for querying dconf settings An abstraction to grant the ability to query dconf settings. It does not grant the ability to update or add settings, due to our current inability to restrict where within the dconf hierarchy updates can occur. From: intrigeri <intrigeri@boum.org> Acked-by: Steve Beattie <steve@nxnw.org> 2013-10-09 06:18:09 -07:00			`# permissions for querying dconf settings; granting write access should`
			`# be specified in a specific application's profile.`

dconf abstraction: allow reading /etc/dconf/**. That's needed e.g. for Totem on current Debian Jessie. 2015-07-19 15:42:54 +02:00			`/etc/dconf/** r,`
Use "run" variable in profiles Signed-off-by: nl6720 <nl6720@gmail.com> 2020-02-13 11:02:49 +02:00			`owner @{run}/user/*/dconf/user r,`
Add dconf abstraction for querying dconf settings An abstraction to grant the ability to query dconf settings. It does not grant the ability to update or add settings, due to our current inability to restrict where within the dconf hierarchy updates can occur. From: intrigeri <intrigeri@boum.org> Acked-by: Steve Beattie <steve@nxnw.org> 2013-10-09 06:18:09 -07:00			`owner @{HOME}/.config/dconf/user r,`
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
abstractions: remove '#' from 'include if exists' This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'. 2020-05-30 19:46:08 +02:00			`include if exists <abstractions/dconf.d>`