felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): continue replacing [0-9]* by @{int}.

Browse source
This commit is contained in:
Alexandre Pujol 2024-02-26 21:10:53 +00:00
parent 99e4c4622d
commit 00051bd2f0
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
100 changed files with 222 additions and 229 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/profiles-g-l/gajim
View file

@ -85,7 +85,7 @@ profile gajim @{exec_path} {
/etc/fstab r,
/usr/share/xml/iso-codes/iso_[0-9]*-[0-9]*.xml r,
/usr/share/xml/iso-codes/{,**} r,
# TMP files locations (first in /tmp/ , /var/tmp/ and @{HOME}/)
/var/tmp/ r,

4
apparmor.d/profiles-g-l/git
View file

@ -147,7 +147,7 @@ profile git @{exec_path} {
owner @{HOME}/@{XDG_SSH_DIR}/known_hosts{,.*} rw,
owner @{HOME}/@{XDG_SSH_DIR}/known_hosts.old rwl,
owner /tmp/git@*:[0-9]* rwl -> /tmp/git@*:[0-9]*.*,
owner /tmp/git@*:@{int} rwl -> /tmp/git@*:@{int}.*,
owner @{PROC}/@{pid}/fd/ r,
@ -182,7 +182,7 @@ profile git @{exec_path} {
/etc/vim/{,**} r,
owner @{user_projects_dirs}/**/ r,
owner @{user_projects_dirs}/**/.git/[0-9]* rw,
owner @{user_projects_dirs}/**/.git/@{int} rw,
owner @{user_projects_dirs}/**/.git/*MSG rw,
owner @{HOME}/.selected_editor r,

2
apparmor.d/profiles-g-l/gpa
View file

@ -43,7 +43,7 @@ profile gpa @{exec_path} {
# Files to verify
owner /**.tar.gz r,
owner /tmp/xauth-[0-9]*-_[0-9] r,
owner /tmp/xauth-@{int}-_[0-9] r,
# External apps
@{lib}/firefox/firefox rPUx,

5
apparmor.d/profiles-g-l/hardinfo
View file

@ -40,7 +40,6 @@ profile hardinfo @{exec_path} {
@{bin}/locale rix,
@{bin}/make rix,
@{bin}/perl rix,
@{bin}/python2.[0-9]* rix,
@{bin}/python3.@{int} rix,
@{bin}/route rix,
@{bin}/ruby[0-9].@{int} rix,
@ -71,8 +70,8 @@ profile hardinfo @{exec_path} {
@{sys}/devices/system/cpu/** r,
@{sys}/devices/virtual/dmi/id/* r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]/hwmon[0-9]/temp* r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]/temp* r,
@{sys}/devices/virtual/thermal/thermal_zone@{int}/hwmon@{int}/temp* r,
@{sys}/devices/virtual/thermal/thermal_zone@{int}/temp* r,
@{sys}/devices/platform/**/hwmon/hwmon@{int}/temp* r,
@{sys}/devices/platform/**/hwmon/hwmon@{int}/fan* r,
@{sys}/devices/@{pci}/eeprom r,

10
apparmor.d/profiles-g-l/htop
View file

@ -97,14 +97,14 @@ profile htop @{exec_path} {
@{sys}/devices/**/hwmon/**/{name,temp*} r,
@{sys}/devices/**/power_supply/**/{uevent,type,online} r,
@{sys}/devices/*/name r,
@{sys}/devices/i2c-[0-9]*/name r,
@{sys}/devices/@{pci}/i2c-[0-9]*/name r,
@{sys}/devices/platform/*/i2c-[0-9]*/name r,
@{sys}/devices/i2c-@{int}/name r,
@{sys}/devices/@{pci}/i2c-@{int}/name r,
@{sys}/devices/platform/*/i2c-@{int}/name r,
@{sys}/devices/system/cpu/cpu@{int}/online r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/cpuinfo_{cur,min,max}_freq r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_{cur,min,max}_freq r,
@{sys}/devices/virtual/block/zram[0-9]*/{disksize,mm_stat} r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]*/temp r,
@{sys}/devices/virtual/block/zram@{int}/{disksize,mm_stat} r,
@{sys}/devices/virtual/thermal/thermal_zone@{int}/temp r,
@{sys}/kernel/mm/hugepages/ r,
@{sys}/kernel/mm/hugepages/hugepages-*/nr_hugepages r,

2
apparmor.d/profiles-g-l/hugo
View file

@ -39,7 +39,7 @@ profile hugo @{exec_path} {
owner @{user_cache_dirs}/hugo_cache/{,**} rwkl,
owner /tmp/hugo_cache/{,**} rwkl,
owner /tmp/go-codehost-[0-9]* rw,
owner /tmp/go-codehost-@{int} rw,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,

2
apparmor.d/profiles-g-l/hwinfo
View file

@ -60,7 +60,7 @@ profile hwinfo @{exec_path} {
@{sys}/bus/{,**/} r,
@{sys}/class/*/ r,
@{sys}/devices/pci[0-9]*/** r,
@{sys}/devices/@{pci_bus}/** r,
@{sys}/devices/**/input/**/dev r,
@{sys}/devices/**/{modalias,uevent} r,
@{sys}/devices/virtual/net/*/{type,carrier,address} r,

4
apparmor.d/profiles-g-l/irqbalance
View file

@ -21,14 +21,14 @@ profile irqbalance @{exec_path} flags=(attach_disconnected) {
/ r,
@{run}/irqbalance/irqbalance[0-9]*.sock w,
@{run}/irqbalance/irqbalance@{int}.sock w,
@{sys}/bus/pci/devices/ r,
@{sys}/devices/@{pci}/{class,numa_node,local_cpus,irq} r,
@{sys}/devices/@{pci}/{vendor,device,subsystem_vendor,subsystem_device} r,
@{sys}/devices/@{pci}/msi_irqs/ r,
@{sys}/devices/system/cpu/cpu@{int}/ r,
@{sys}/devices/system/cpu/cpu@{int}/cache/index[0-9]*/shared_cpu_map r,
@{sys}/devices/system/cpu/cpu@{int}/cache/index@{int}/shared_cpu_map r,
@{sys}/devices/system/cpu/cpu@{int}/topology/{,**} r,
@{sys}/devices/system/cpu/isolated r,
@{sys}/devices/system/node/ r,

10
apparmor.d/profiles-g-l/jdownloader
View file

@ -49,7 +49,7 @@ profile jdownloader @{exec_path} {
owner @{JD_INSTALLDIR}/jre/lib/*/jli/libjli.so mrw,
owner @{JD_INSTALLDIR}/jre/lib/*/server/libjvm.so mrw,
owner @{JD_INSTALLDIR}/jre/lib/*/*.so mrw,
owner @{JD_INSTALLDIR}/tmp/jna/jna[0-9]*.tmp mrw,
owner @{JD_INSTALLDIR}/tmp/jna/jna@{int}.tmp mrw,
owner @{JD_INSTALLDIR}/tmp/7zip/SevenZipJBinding-*/lib7-Zip-JBinding.so mrw,
owner @{HOME}/.oracle_jre_usage/@{hex}.timestamp rw,
@ -67,10 +67,10 @@ profile jdownloader @{exec_path} {
owner /tmp/SevenZipJBinding-*/ rw,
owner /tmp/SevenZipJBinding-*/lib7-Zip-JBinding.so mrw,
# For auto updates
owner /tmp/lastChanceSrc[0-9]*lch rw,
owner /tmp/lastChanceDst[0-9]*.jar rw,
owner /tmp/i4j_log_jd2_[0-9]*.log rw,
owner /tmp/install4jError[0-9]*.log rw,
owner /tmp/lastChanceSrc@{int}lch rw,
owner /tmp/lastChanceDst@{int}.jar rw,
owner /tmp/i4j_log_jd2_@{int}.log rw,
owner /tmp/install4jError@{int}.log rw,
owner @{HOME}/.Xauthority r,

2
apparmor.d/profiles-g-l/jmtpfs
View file

@ -25,7 +25,7 @@ profile jmtpfs @{exec_path} {
owner @{HOME}/*/ r,
owner @{HOME}/*/*/ r,
owner @{user_cache_dirs}/*/mtp{,-[0-9]*}/ rw,
owner @{user_cache_dirs}/*/mtp{,-@{int}}/ rw,
mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/,
mount fstype={fuse,fuse.jmtpfs} -> @{HOME}/*/*/,

6
apparmor.d/profiles-g-l/kodi
View file

@ -44,7 +44,7 @@ profile kodi @{exec_path} {
owner @{HOME}/.kodi/** rwk,
owner @{HOME}/core w,
owner @{HOME}/kodi_crashlog-[0-9]*_[0-9]*.log w,
owner @{HOME}/kodi_crashlog-@{int}_@{int}.log w,
owner @{HOME}/.icons/default/index.theme r,
@ -68,7 +68,7 @@ profile kodi @{exec_path} {
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_cur_freq r,
@{sys}/devices/virtual/thermal/thermal_zone[0-9]*/temp r,
@{sys}/devices/virtual/thermal/thermal_zone@{int}/temp r,
@{run}/udev/data/* r,
@ -84,7 +84,7 @@ profile kodi @{exec_path} {
# file_inherit
/usr/share/kodi/** r,
/sys/devices/virtual/thermal/thermal_zone[0-9]*/temp r,
/sys/devices/virtual/thermal/thermal_zone@{int}/temp r,
/sys/devices/system/cpu/cpufreq/policy@{int}/scaling_cur_freq r,
/home/morfik/.kodi/temp/kodi.log w,

2
apparmor.d/profiles-g-l/last
View file

@ -24,7 +24,7 @@ profile last @{exec_path} {
@{PROC}/@{pids}/loginuid r,
/var/log/wtmp r,
/var/log/btmp{,.[0-9]*} r,
/var/log/btmp{,.@{int}} r,
include if exists <local/last>
}

4
apparmor.d/profiles-g-l/localepurge
View file

@ -42,8 +42,8 @@ profile localepurge @{exec_path} {
/usr/share/cups/{templates,locale,doc-root}/{,**/} r,
/usr/share/cups/{templates,locale,doc-root}/**/** w,
/usr/share/vim/ r,
/usr/share/vim/vim[0-9]*/lang/{,**/} r,
/usr/share/vim/vim[0-9]*/lang/**/** w,
/usr/share/vim/vim@{int}/lang/{,**/} r,
/usr/share/vim/vim@{int}/lang/**/** w,
/usr/share/X11/locale/**/** w,
/etc/locale.nopurge r,

2
apparmor.d/profiles-g-l/login
View file

@ -52,7 +52,7 @@ profile login @{exec_path} flags=(attach_disconnected) {
/etc/security/pam_env.conf r,
/etc/shells r,
/var/log/btmp{,.[0-9]*} r,
/var/log/btmp{,.@{int}} r,
owner @{user_cache_dirs}/motd.legal-displayed rw,