mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 00:14:44 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

remmina: add dconf abstraction and use {etc_ro} for /etc path

Browse source 
Signed-off-by: Paulo Flabiano Smorigo <pfsmorigo@canonical.com>
This commit is contained in:
Paulo Flabiano Smorigo 2024-11-06 12:40:07 -03:00
parent 2ff8ec918b
commit 74f7e9c295
Failed to generate hash of commit
1 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
profiles/apparmor.d/remmina
View file

@ -24,6 +24,7 @@ profile remmina /usr/bin/remmina {
include <abstractions/openssl>
include <abstractions/ssl_certs>
include <abstractions/private-files-strict>
include <abstractions/dconf>
dbus (bind) bus=session name="org.remmina.Remmina",
dbus (send) bus=session path="/org/gtk/vfs/mounttracker" interface="org.gtk.vfs.MountTracker" member={ListMountableInfo,LookupMount} peer=(label=unconfined),
@ -32,8 +33,7 @@ profile remmina /usr/bin/remmina {
dbus (send) bus=session path="/org/freedesktop/secrets/collection/login" interface="org.freedesktop.DBus.Properties" member=GetAll peer=(label=unconfined),
dbus (send) bus=system path="/org/freedesktop/NetworkManager" interface="org.freedesktop.DBus.Properties" member=GetAll peer=(label=unconfined),
/etc/dconf/** r,
/etc/fstab r,
@{etc_ro}/fstab r,
/usr/bin/remmina mr,
/usr/share/remmina/{,**} r,
/var/lib/snapd/desktop/icons/{,**} r,
@ -42,7 +42,6 @@ profile remmina /usr/bin/remmina {
owner @{HOME}/.cache/remmina/{,**} rw,
owner @{HOME}/.cache/thumbnails/{,**} r,
owner @{HOME}/.config/autostart/remmina-applet.desktop r,
owner @{HOME}/.config/dconf/user r,
owner @{HOME}/.config/freerdp/known_hosts2 rwk,
owner @{HOME}/.config/glib-2.0/settings/keyfile rw,
owner @{HOME}/.config/remmina/{,**} rw,
@ -53,10 +52,12 @@ profile remmina /usr/bin/remmina {
owner @{HOME}/{,[^.]**} rw,
owner @{run}/user/@{uid}/gvfsd/socket-* rw,
owner @{run}/user/@{uid}/dconf/{,user} rw,
owner @{PROC}/@{pid}/task/@{tid}/comm rw,
owner @{PROC}/@{pid}/mountinfo rw,
## dconf abstraction is read-only, adding write access
owner @{run}/user/@{uid}/dconf/{,user} rw,
owner @{run}/user/@{uid}/at-spi/ rw,
owner @{run}/user/@{uid}/at-spi/bus{,_[0-9]*} rw,