mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-06 17:31:01 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions
apparmor/profiles/apparmor.d
History
John Johansen 24855edd11 Merge Add Fontmatrix to abstractions/fonts 
[Fontmatrix](https://github.com/fontmatrix/fontmatrix) [adds \~/.Fontmatrix/Activated to fonts.conf](https://github.com/fontmatrix/fontmatrix/blob/75552e2/src/typotek.cpp#L1081-L1088). This causes programs which use [Fontconfig](https://gitlab.freedesktop.org/fontconfig/fontconfig) (directly or indirectly through libraries such as [Pango](https://pango.gnome.org/)) to include that directory in their font search path, which causes errors such as:

```
audit: type=1400 audit(1602678958.525:53): apparmor="DENIED" operation="open" profile="fr.emersion.Mako" name="/home/username/.Fontmatrix/Activated/.uuid" pid=48553 comm="mako" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
audit: type=1400 audit(1602678958.525:54): apparmor="DENIED" operation="open" profile="fr.emersion.Mako" name="/home/username/.Fontmatrix/Activated/" pid=48553 comm="mako" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
```

if the program does not explicitly include this directory in its AppArmor profile. As with other common font locations, add `~/.Fontmatrix/Activated` to the fonts abstraction for read-only access.

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/657
Acked-by: John Johansen <john.johansen@canonical.com>
2020-10-25 11:24:58 +00:00
..
abi policy: Provide example and base abi to pin pre 3.0 policy 2020-08-28 12:57:00 -07:00
abstractions Merge Add Fontmatrix to abstractions/fonts 2020-10-25 11:24:58 +00:00
apache2.d Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
local Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
tunables Introduce tunables/etc with @{etc_ro} and @{etc_rw} 2020-07-23 20:51:25 +02:00
bin.ping Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
lsb_release Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
nvidia_modprobe nvidia_modprobe: allow creating /dev/nvidia-modeset 2020-09-03 18:20:33 +03:00
php-fpm profiles: update profiles for the new proc attr interfaces 2020-09-18 04:07:24 -07:00
sbin.klogd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
sbin.syslog-ng profiles: Add a hosts_access abstraction 2020-09-01 19:39:59 -07:00
sbin.syslogd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.lib.apache2.mpm-prefork.apache2 Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.lib.dovecot.anvil add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.auth add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.config add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.deliver add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.dict Merge Dovecot profile updates 2020-06-12 21:23:22 +00:00
usr.lib.dovecot.director profiles: Add 3 more dovecot services 2020-10-07 20:26:01 +02:00
usr.lib.dovecot.doveadm-server profiles: Add 3 more dovecot services 2020-10-07 20:26:01 +02:00
usr.lib.dovecot.dovecot-auth add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.dovecot-lda profiles: Add a hosts_access abstraction 2020-09-01 19:39:59 -07:00
usr.lib.dovecot.imap profiles: Drop duplicate line 2020-10-07 20:12:45 +02:00
usr.lib.dovecot.imap-login add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.lmtp profiles: update profiles for the new proc attr interfaces 2020-09-18 04:07:24 -07:00
usr.lib.dovecot.log add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.managesieve add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.managesieve-login add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.pop3 add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.pop3-login add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.replicator profiles: Add 3 more dovecot services 2020-10-07 20:26:01 +02:00
usr.lib.dovecot.script-login Add dovecot-script-login profile 2020-09-27 16:26:28 +02:00
usr.lib.dovecot.ssl-params add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.lib.dovecot.stats add profile names to dovecot profiles 2020-06-11 12:57:53 +02:00
usr.sbin.apache2 Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.avahi-daemon Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.dnsmasq Revert "Merge dnsmasq: Permit access to /proc/self/fd/" 2020-10-19 20:29:43 +00:00
usr.sbin.dovecot profiles: Add 3 more dovecot services 2020-10-07 20:26:01 +02:00
usr.sbin.identd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.mdnsd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.nmbd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.nscd profiles: nscd: service fails with apparmor 3.0.0-2 on Arch Linux 2020-10-11 04:50:49 -07:00
usr.sbin.ntpd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.smbd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.smbldap-useradd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.traceroute Change #include to include in active profiles 2020-06-09 23:30:24 +02:00
usr.sbin.winbindd Change #include to include in active profiles 2020-06-09 23:30:24 +02:00