felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): add paperspecs to cups backend.

Browse source
This commit is contained in:
Alexandre Pujol 2025-05-17 15:23:24 +02:00
parent a46967cb43
commit 043dc3fc05
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
15 changed files with 18 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/cups/cups-backend-beh
View file

@ -13,6 +13,7 @@ profile cups-backend-beh @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-beh> include if exists <local/cups-backend-beh>
} }

1
apparmor.d/groups/cups/cups-backend-bluetooth
View file

@ -13,6 +13,7 @@ profile cups-backend-bluetooth @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-bluetooth> include if exists <local/cups-backend-bluetooth>
} }

1
apparmor.d/groups/cups/cups-backend-brf
View file

@ -15,6 +15,7 @@ profile cups-backend-brf @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-brf> include if exists <local/cups-backend-brf>
} }

1
apparmor.d/groups/cups/cups-backend-dnssd
View file

@ -14,6 +14,7 @@ profile cups-backend-dnssd @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-dnssd> include if exists <local/cups-backend-dnssd>
} }

1
apparmor.d/groups/cups/cups-backend-hp
View file

@ -13,6 +13,7 @@ profile cups-backend-hp @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-hp> include if exists <local/cups-backend-hp>
} }

1
apparmor.d/groups/cups/cups-backend-implicitclass
View file

@ -13,6 +13,7 @@ profile cups-backend-implicitclass @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-implicitclass> include if exists <local/cups-backend-implicitclass>
} }

1
apparmor.d/groups/cups/cups-backend-ipp
View file

@ -13,6 +13,7 @@ profile cups-backend-ipp @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-ipp> include if exists <local/cups-backend-ipp>
} }

1
apparmor.d/groups/cups/cups-backend-lpd
View file

@ -13,6 +13,7 @@ profile cups-backend-lpd @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-lpd> include if exists <local/cups-backend-lpd>
} }

1
apparmor.d/groups/cups/cups-backend-mdns
View file

@ -13,6 +13,7 @@ profile cups-backend-mdns @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-mdns> include if exists <local/cups-backend-mdns>
} }

1
apparmor.d/groups/cups/cups-backend-parallel
View file

@ -13,6 +13,7 @@ profile cups-backend-parallel @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-parallel> include if exists <local/cups-backend-parallel>
} }

6
apparmor.d/groups/cups/cups-backend-pdf
View file

@ -14,9 +14,10 @@ profile cups-backend-pdf @{exec_path} {
include <abstractions/user-download-strict> include <abstractions/user-download-strict>
capability chown, capability chown,
capability dac_override,
capability dac_read_search,
capability setgid, capability setgid,
capability setuid, capability setuid,
capability dac_override,
unix peer=(label=cupsd), unix peer=(label=cupsd),
@ -30,10 +31,11 @@ profile cups-backend-pdf @{exec_path} {
/usr/share/ghostscript/{,**} r, /usr/share/ghostscript/{,**} r,
/etc/papersize r,
/etc/cups/ r, /etc/cups/ r,
/etc/cups/cups-pdf.conf r, /etc/cups/cups-pdf.conf r,
/etc/cups/ppd/*.ppd r, /etc/cups/ppd/*.ppd r,
/etc/papersize r,
/etc/paperspecs r,
/var/log/cups/cups-pdf*_log w, /var/log/cups/cups-pdf*_log w,
/var/spool/cups-pdf/{,**} rw, /var/spool/cups-pdf/{,**} rw,

1
apparmor.d/groups/cups/cups-backend-serial
View file

@ -13,6 +13,7 @@ profile cups-backend-serial @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
/dev/ttyS@{int} w, /dev/ttyS@{int} w,

1
apparmor.d/groups/cups/cups-backend-snmp
View file

@ -19,6 +19,7 @@ profile cups-backend-snmp @{exec_path} {
/etc/cups/snmp.conf r, /etc/cups/snmp.conf r,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-snmp> include if exists <local/cups-backend-snmp>
} }

1
apparmor.d/groups/cups/cups-backend-socket
View file

@ -13,6 +13,7 @@ profile cups-backend-socket @{exec_path} {
@{exec_path} mr, @{exec_path} mr,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-socket> include if exists <local/cups-backend-socket>
} }

1
apparmor.d/groups/cups/cups-backend-usb
View file

@ -21,6 +21,7 @@ profile cups-backend-usb @{exec_path} {
/etc/cups/ppd/*.ppd r, /etc/cups/ppd/*.ppd r,
/etc/papersize r, /etc/papersize r,
/etc/paperspecs r,
include if exists <local/cups-backend-usb> include if exists <local/cups-backend-usb>
} }