apparmor/profiles/apparmor.d/abstractions/freedesktop.org
intrigeri aed447aca2 freedesktop.org abstraction: simplify by not attempting to guess the exhaustive list of files that can exist in {~/.local/share,/usr/share}/applications/.
As Simon McVittie wrote, "if a specification or library creates extra caches, or
has .desktop files in a subdirectory, or anything like that, then I don't see
why we wouldn't want to allow reading those too".
2018-07-27 06:26:57 +00:00

1.1 KiB

#

#

#

@{usr_share}/applications/{,} r, @{usr_share}/icons/{,} r, @{usr_share}/pixmaps/{**,} r,

@{usr_share}/mime/** r,

owner @{HOME}/.icons/ r, owner @{HOME}/.recently-used.xbel* rw, owner @{HOME}/.local/share/recently-used.xbel* rw, owner @{HOME}/.config/user-dirs.dirs r, owner @{HOME}/.config/mimeapps.list r, owner @{home_local_share}/applications/ r, owner @{home_local_share}/applications/** r, owner @{home_local_share}/icons/ r, owner @{home_local_share}/icons/** r, owner @{home_local_share}/mime/ r, owner @{home_local_share}/mime/** r,