apparmor/profiles/apparmor.d/abstractions/dconf

# vim:syntax=apparmor

# permissions for querying dconf settings; granting write access should
# be specified in a specific application's profile.

  /etc/dconf/** r,
  owner /{,var/}run/user/*/dconf/user r,
  owner @{HOME}/.config/dconf/user r,

  # Include additions to the abstraction
  #include if exists <abstractions/dconf.d>
Add dconf abstraction for querying dconf settings An abstraction to grant the ability to query dconf settings. It does not grant the ability to update or add settings, due to our current inability to restrict where within the dconf hierarchy updates can occur. From: intrigeri <intrigeri@boum.org> Acked-by: Steve Beattie <steve@nxnw.org> 2013-10-09 06:18:09 -07:00			`# vim:syntax=apparmor`

			`# permissions for querying dconf settings; granting write access should`
			`# be specified in a specific application's profile.`

dconf abstraction: allow reading /etc/dconf/**. That's needed e.g. for Totem on current Debian Jessie. 2015-07-19 15:42:54 +02:00			`/etc/dconf/** r,`
Add dconf abstraction for querying dconf settings An abstraction to grant the ability to query dconf settings. It does not grant the ability to update or add settings, due to our current inability to restrict where within the dconf hierarchy updates can occur. From: intrigeri <intrigeri@boum.org> Acked-by: Steve Beattie <steve@nxnw.org> 2013-10-09 06:18:09 -07:00			`owner /{,var/}run/user/*/dconf/user r,`
			`owner @{HOME}/.config/dconf/user r,`
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
			`#include if exists <abstractions/dconf.d>`