felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2022-05-09 21:51:18 +01:00
parent 940c9de083
commit 0b66933b45
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
22 changed files with 37 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

1
apparmor.d/groups/gnome/gjs-console
View file

@ -16,6 +16,7 @@ profile gjs-console @{exec_path} flags=(attach_disconnected) {
include <abstractions/freedesktop.org>
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/opencl-nvidia>
include <abstractions/openssl>
include <abstractions/vulkan>

1
apparmor.d/groups/gnome/gnome-calendar
View file

@ -11,6 +11,7 @@ profile gnome-calendar @{exec_path} {
include <abstractions/base>
include <abstractions/dconf>
include <abstractions/gnome>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/opencl>
include <abstractions/openssl>

4
apparmor.d/groups/gnome/gnome-control-center
View file

@ -40,8 +40,8 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
/{usr/,}bin/locale rix,
/{usr/,}bin/openvpn rPx,
/{usr/,}bin/passwd rPx,
/{usr/,}lib/gnome-control-center-goa-helper rPx,
/{usr/,}lib/gnome-control-center-print-renderer rPx,
@{libexec}/gnome-control-center-goa-helper rPx,
@{libexec}/gnome-control-center-print-renderer rPx,
/{usr/,}lib/webkit2gtk-{3,4}.0/WebKitNetworkProcess rix,
/usr/share/backgrounds/gnome/* r,

1
apparmor.d/groups/gnome/gnome-control-center-print-renderer
View file

@ -15,6 +15,7 @@ profile gnome-control-center-print-renderer @{exec_path} {
include <abstractions/fonts>
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/opencl-nvidia>
include <abstractions/vulkan>

2
apparmor.d/groups/gnome/gnome-music
View file

@ -56,7 +56,5 @@ profile gnome-music @{exec_path} {
owner @{PROC}/@{pid}/mounts r,
/dev/shm/ r,
include if exists <local/gnome-music>
}