mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
92e27f5566
I noticed that some apps have support for moving files to trash, but currently there's no abstraction that would provide rules to make this action possible. Fixes: https://gitlab.com/apparmor/apparmor/-/issues/160 MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/738 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Christian Boltz <apparmor@cboltz.de>
75 lines
3.5 KiB
Text
75 lines
3.5 KiB
Text
abi <abi/3.0>,
|
|
|
|
# requires <tunables/home>
|
|
|
|
owner @{HOME}/.config/trashrc rw,
|
|
owner @{HOME}/.config/trashrc.lock rwk,
|
|
owner @{HOME}/.config/#[0-9]*[0-9] rwk,
|
|
owner @{HOME}/.config/trashrc.* rwl -> @{HOME}/.config/#[0-9]*[0-9],
|
|
|
|
owner @{run}/user/@{uid}/#[0-9]*[0-9] rw,
|
|
owner @{run}/user/@{uid}/trash.so*.[0-9].slave-socket rwl -> @{run}/user/@{uid}/#[0-9]*[0-9],
|
|
|
|
# Home trash location
|
|
owner @{HOME}/.local/share/Trash/ rw,
|
|
owner @{HOME}/.local/share/Trash/#[0-9]*[0-9] rw,
|
|
owner @{HOME}/.local/share/Trash/directorysizes{,.*} rwl -> @{HOME}/.local/share/Trash/#[0-9]*[0-9],
|
|
owner @{HOME}/.local/share/Trash/files/{,**} rw,
|
|
owner @{HOME}/.local/share/Trash/info/ rw,
|
|
owner @{HOME}/.local/share/Trash/info/*.trashinfo{,.*} rw,
|
|
owner @{HOME}/.local/share/Trash/expunged/ rw,
|
|
owner @{HOME}/.local/share/Trash/expunged/[0-9]* rw,
|
|
owner @{HOME}/.local/share/Trash/expunged/[0-9]*/ rw,
|
|
owner @{HOME}/.local/share/Trash/expunged/[0-9]*/** rw,
|
|
|
|
# Partitions' trash location when the admin creates the .Trash/ folder in the top lvl dir
|
|
owner /media/*/.Trash/ rw,
|
|
owner /media/*/.Trash/@{uid}/ rw,
|
|
owner /media/*/.Trash/@{uid}/#[0-9]*[0-9] rw,
|
|
owner /media/*/.Trash/@{uid}/directorysizes{,.*} rwl -> /media/*/.Trash/@{uid}/#[0-9]*[0-9],
|
|
owner /media/*/.Trash/@{uid}/files/{,**} rw,
|
|
owner /media/*/.Trash/@{uid}/info/ rw,
|
|
owner /media/*/.Trash/@{uid}/info/*.trashinfo{,.*} rw,
|
|
owner /media/*/.Trash/@{uid}/expunged/ rw,
|
|
owner /media/*/.Trash/@{uid}/expunged/[0-9]* rw,
|
|
owner /media/*/.Trash/@{uid}/expunged/[0-9]*/ rw,
|
|
owner /media/*/.Trash/@{uid}/expunged/[0-9]*/** rw,
|
|
|
|
# Partitions' trash location when the admin doesn't create the .Trash/ folder in the top lvl dir
|
|
owner /media/*/.Trash-@{uid}/ rw,
|
|
owner /media/*/.Trash-@{uid}/#[0-9]*[0-9] rw,
|
|
owner /media/*/.Trash-@{uid}/directorysizes{,.*} rwl -> /media/*/.Trash-@{uid}/#[0-9]*[0-9],
|
|
owner /media/*/.Trash-@{uid}/files/{,**} rw,
|
|
owner /media/*/.Trash-@{uid}/info/ rw,
|
|
owner /media/*/.Trash-@{uid}/info/*.trashinfo{,.*} rw,
|
|
owner /media/*/.Trash-@{uid}/expunged/ rw,
|
|
owner /media/*/.Trash-@{uid}/expunged/[0-9]* rw,
|
|
owner /media/*/.Trash-@{uid}/expunged/[0-9]*/ rw,
|
|
owner /media/*/.Trash-@{uid}/expunged/[0-9]*/** rw,
|
|
|
|
# Removable media's trash location when the admin creates the .Trash/ folder in the top lvl dir
|
|
owner /media/*/*/.Trash/ rw,
|
|
owner /media/*/*/.Trash/@{uid}/ rw,
|
|
owner /media/*/*/.Trash/@{uid}/#[0-9]*[0-9] rw,
|
|
owner /media/*/*/.Trash/@{uid}/directorysizes{,.*} rwl -> /media/*/*/.Trash/@{uid}/#[0-9]*[0-9],
|
|
owner /media/*/*/.Trash/@{uid}/files/{,**} rw,
|
|
owner /media/*/*/.Trash/@{uid}/info/ rw,
|
|
owner /media/*/*/.Trash/@{uid}/info/*.trashinfo{,.*} rw,
|
|
owner /media/*/*/.Trash/@{uid}/expunged/ rw,
|
|
owner /media/*/*/.Trash/@{uid}/expunged/[0-9]* rw,
|
|
owner /media/*/*/.Trash/@{uid}/expunged/[0-9]*/ rw,
|
|
owner /media/*/*/.Trash/@{uid}/expunged/[0-9]*/** rw,
|
|
|
|
# Removable media's trash location when the admin doesn't create the .Trash/ folder in the top lvl dir
|
|
owner /media/*/*/.Trash-@{uid}/ rw,
|
|
owner /media/*/*/.Trash-@{uid}/#[0-9]*[0-9] rw,
|
|
owner /media/*/*/.Trash-@{uid}/directorysizes{,.*} rwl -> /media/*/*/.Trash-@{uid}/#[0-9]*[0-9],
|
|
owner /media/*/*/.Trash-@{uid}/files/{,**} rw,
|
|
owner /media/*/*/.Trash-@{uid}/info/ rw,
|
|
owner /media/*/*/.Trash-@{uid}/info/*.trashinfo{,.*} rw,
|
|
owner /media/*/*/.Trash-@{uid}/expunged/ rw,
|
|
owner /media/*/*/.Trash-@{uid}/expunged/[0-9]* rw,
|
|
owner /media/*/*/.Trash-@{uid}/expunged/[0-9]*/ rw,
|
|
owner /media/*/*/.Trash-@{uid}/expunged/[0-9]*/** rw,
|
|
|
|
include if exists <abstractions/trash.d>
|