felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): flatpak: ensure remote can be added/removed.

Browse source 
see #690
This commit is contained in:
Alexandre Pujol 2025-06-16 22:48:16 +02:00
parent 8fa7c49a65
commit 011de3c301
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/flatpak/flatpak
View file

@ -96,6 +96,8 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain
owner @{tmp}/#@{int} rw,
owner @{tmp}/ostree-gpg-@{rand6}/{,**} rw,
owner @{tmp}/remote-summary-sig.@{rand6} rw,
owner @{tmp}/remote-summary.@{rand6} rw,
owner /dev/shm/flatpak*/{,**} rw,
@{run}/.userns r,

6
apparmor.d/groups/flatpak/flatpak-system-helper
View file

@ -40,7 +40,7 @@ profile flatpak-system-helper @{exec_path} {
/etc/flatpak/{,**} r,
/etc/machine-id r,
/usr/share/flatpak/remotes.d/ r,
/usr/share/flatpak/remotes.d/{,**} r,
/usr/share/flatpak/triggers/ r,
/usr/share/mime/mime.cache r,
@ -51,8 +51,8 @@ profile flatpak-system-helper @{exec_path} {
owner /{var/,}tmp/ostree-gpg-@{rand6}/ rw,
owner @{tmp}/ostree-gpg-@{rand6}/** rwkl -> /tmp/ostree-gpg-@{rand6}/**,
/tmp/remote-summary-sig.@{rand6} r,
/tmp/remote-summary.@{rand6} r,
@{tmp}/remote-summary-sig.@{rand6} r,
@{tmp}/remote-summary.@{rand6} r,
@{PROC}/@{pid}/stat r,
owner @{PROC}/@{pid}/fd/ r,