felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update (2).

Browse source
This commit is contained in:
Alexandre Pujol 2024-01-28 22:33:45 +00:00
parent 9b49999414
commit 049e89b379
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
21 changed files with 69 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/gnome/gjs-console
View file

@ -60,7 +60,7 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
/usr/share/gnome-shell/{,**} r,
/usr/share/icu/@{int}.@{int}/*.dat r,
/var/lib/gdm{3,}/.cache/fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rw,
/var/lib/gdm{3,}/.cache/fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rwl,
/var/lib/gdm{3,}/.cache/gstreamer-1.0/ rw,
/var/lib/gdm{3,}/.cache/gstreamer-1.0/registry.*.bin{,.tmp@{rand6}} rw,
/var/lib/gdm{3,}/.config/dconf/user r,

4
apparmor.d/groups/gnome/gnome-shell
View file

@ -85,6 +85,8 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
# dbus: own bus=session name=org.gtk.Notifications
# dbus: own bus=session name=org.kde.StatusNotifierWatcher path=/StatusNotifierWatcher
# TODO: org.gtk.Actions for com.rastersoft.dingextension
# Talk with gnome-shell
# dbus: talk bus=session name=com.rastersoft.ding label=gnome-extension-ding
@ -259,7 +261,7 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected) {
/var/lib/gdm{3,}/.config/ibus/ rw,
/var/lib/gdm{3,}/.config/ibus/bus/ rw,
/var/lib/gdm{3,}/.config/ibus/bus/@{md5}-unix-{,wayland-}@{int} r,
/var/lib/gdm{3,}/.config/pulse/ r,
/var/lib/gdm{3,}/.config/pulse/ rw,
/var/lib/gdm{3,}/.config/pulse/client.conf r,
/var/lib/gdm{3,}/.config/pulse/cookie rwk,
/var/lib/gdm{3,}/.local/share/applications/{,**} r,

1
apparmor.d/groups/gnome/gnome-software
View file

@ -10,6 +10,7 @@ include <tunables/global>
profile gnome-software @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
include <abstractions/fontconfig-cache-write>
include <abstractions/gnome-strict>
include <abstractions/graphics>
include <abstractions/nameservice-strict>

2
apparmor.d/groups/gnome/gsd-xsettings
View file

@ -62,7 +62,7 @@ profile gsd-xsettings @{exec_path} {
@{etc_ro}/xdg/Xwayland-session.d/ r,
@{etc_ro}/xdg/Xwayland-session.d/* rix,
/var/lib/gdm{3,}/.cache/fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} r,
/var/lib/gdm{3,}/.cache/fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rw,
/var/lib/gdm{3,}/.config/dconf/user r,
/var/lib/gdm3/greeter-dconf-defaults r,

3
apparmor.d/groups/gnome/tracker-extract
View file

@ -51,9 +51,10 @@ profile tracker-extract @{exec_path} flags=(attach_disconnected) {
/etc/fstab r,
/var/lib/gdm{3,}/.cache/ rw,
/var/lib/gdm{3,}/.cache/tracker3/{,**} rw,
/var/lib/gdm{3,}/.cache/fontconfig/[a-f0-9]*.cache-?{,.NEW,.LCK,.TMP-*} rw,
/var/lib/gdm{3,}/.cache/gstreamer-1.0/ rw,
/var/lib/gdm{3,}/.cache/gstreamer-1.0/registry.*.bin{,.tmp@{rand6}} rw,
/var/lib/gdm{3,}/.cache/tracker3/{,**} rw,
/var/lib/gdm{3,}/.config/dconf/user r,
/var/lib/gdm{3,}/greeter-dconf-defaults r,