felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profiles): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2023-04-15 11:55:41 +01:00
parent c039fe6c99
commit 0e21955b0e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
10 changed files with 48 additions and 44 deletions
Download patch file Download diff file Expand all files Collapse all files

4
apparmor.d/profiles-s-z/scrcpy
View file

@ -25,7 +25,9 @@ profile scrcpy @{exec_path} {
/{usr/,}bin/adb rPx,
/usr/share/scrcpy/{,*} r,
/usr/share/icons/**/scrcpy.png r,
/usr/share/icons/{,**} r,
/etc/machine-id r,
/var/lib/dbus/machine-id r,

2
apparmor.d/profiles-s-z/which
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}bin/which{.debianutils,}
@{exec_path} = /{usr/,}bin/which{.debianutils,}
profile which @{exec_path} flags=(complain) {
include <abstractions/base>
include <abstractions/consoles>

19
apparmor.d/profiles-s-z/wpa-action
View file

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}sbin/wpa_action
@{exec_path} = /{usr/,}{s,}bin/wpa_action
profile wpa-action @{exec_path} {
include <abstractions/base>
@ -16,27 +16,26 @@ profile wpa-action @{exec_path} {
@{exec_path} mr,
/{usr/,}sbin/wpa_cli rPx,
/{usr/,}{s,}bin/wpa_cli rPx,
/{usr/,}bin/{,ba,da}sh rix,
/{usr/,}bin/logger rix,
/{usr/,}bin/ln rix,
/{usr/,}sbin/ifup rix,
/{usr/,}bin/rm rix,
/{usr/,}bin/ip rix,
/{usr/,}bin/{,e}grep rix,
/{usr/,}bin/cat rix,
/{usr/,}bin/date rix,
/{usr/,}bin/ip rix,
/{usr/,}bin/ln rix,
/{usr/,}bin/logger rix,
/{usr/,}bin/rm rix,
/{usr/,}sbin/ifup rix,
/etc/wpa_supplicant/{,**} r,
/etc/network/interfaces r,
/etc/network/interfaces.d/{,*} r,
owner @{run}/wpa_action.wlan[0-9]*.ifupdown rw,
owner @{run}/wpa_action.wlan[0-9]*.timestamp rw,
owner @{run}/network/ifstate.wlan[0-9]* rwk,
owner @{run}/sendsigs.omit.d/wpasupplicant.wpa_supplicant.wlan[0-9]*.pid rw,
/etc/network/interfaces r,
/etc/network/interfaces.d/{,*} r,
include if exists <local/wpa-action>
}

14
apparmor.d/profiles-s-z/wpa-cli
View file

@ -6,21 +6,21 @@ abi <abi/3.0>,
include <tunables/global>
@{exec_path} = /{usr/,}sbin/wpa_cli
@{exec_path} = /{usr/,}{s,}bin/wpa_cli
profile wpa-cli @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
/{usr/,}sbin/wpa_action rPx,
/{usr/,}{s,}/wpa_action rPx,
/etc/inputrc r,
owner @{HOME}/.wpa_cli_history rw,
owner @{HOME}/.wpa_cli_history-[0-9]*.tmp rw,
owner @{run}/wpa_supplicant/ r,
owner /tmp/wpa_ctrl_@{pid}-[0-9] rw,
# for interactive mode
/etc/inputrc r,
owner @{HOME}/.wpa_cli_history rw,
owner @{HOME}/.wpa_cli_history-[0-9]*.tmp rw,
include if exists <local/wpa-cli>
}

27
apparmor.d/profiles-s-z/wpa-gui
View file

@ -9,32 +9,29 @@ include <tunables/global>
@{exec_path} = /{usr/,}{s,}bin/wpa_gui
profile wpa-gui @{exec_path} {
include <abstractions/base>
include <abstractions/X>
include <abstractions/gtk>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/dri-enumerate>
include <abstractions/fontconfig-cache-read>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/gtk>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/X>
@{exec_path} mr,
/usr/share/hwdata/pnp.ids r,
/usr/share/qt5ct/** r,
owner @{user_config_dirs}/qt5ct/{,**} r,
owner /tmp/wpa_ctrl_@{pid}-[0-9] w,
owner /dev/shm/#[0-9]*[0-9] rw,
@{run}/wpa_supplicant/ r,
/dev/shm/#[0-9]*[0-9] rw,
owner @{PROC}/@{pid}/cmdline r,
# To configure Qt5 settings (theme, font, icons, etc.) under DE/WM without Qt integration
owner @{user_config_dirs}/qt5ct/{,**} r,
/usr/share/qt5ct/** r,
/usr/share/hwdata/pnp.ids r,
# file_inherit
owner /dev/tty[0-9]* rw,
include if exists <local/wpa-gui>