felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): general update.

Browse source
This commit is contained in:
Alexandre Pujol 2024-03-11 22:47:22 +00:00
parent 0a9021bcf1
commit 0eeefb5f09
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
11 changed files with 36 additions and 61 deletions
Download patch file Download diff file Expand all files Collapse all files

47
apparmor.d/profiles-s-z/utox
View file

@ -10,14 +10,12 @@ include <tunables/global>
@{exec_path} = @{bin}/utox
profile utox @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
include <abstractions/gtk>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read>
include <abstractions/freedesktop.org>
include <abstractions/user-download-strict>
include <abstractions/nameservice-strict>
include <abstractions/audio>
include <abstractions/dconf-write>
include <abstractions/desktop>
include <abstractions/fontconfig-cache-read>
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/video>
network inet dgram,
@ -28,43 +26,16 @@ profile utox @{exec_path} {
@{exec_path} mr,
@{bin}/xdg-open rCx -> open,
@{open_path} rCx -> child-open,
/var/lib/dbus/machine-id r,
/etc/machine-id r,
owner @{HOME}/ r,
owner @{user_config_dirs}/tox/ rw,
owner @{user_config_dirs}/tox/** rw,
/var/lib/dbus/machine-id r,
/etc/machine-id r,
deny owner @{PROC}/@{pid}/cmdline r,
profile open {
include <abstractions/base>
include <abstractions/xdg-open>
@{bin}/xdg-open mr,
@{sh_path} rix,
@{bin}/{m,g,}awk rix,
@{bin}/readlink rix,
@{bin}/basename rix,
owner @{HOME}/ r,
owner @{run}/user/@{uid}/ r,
# Allowed apps to open
@{lib}/firefox/firefox rPUx,
@{bin}/viewnior rPUx,
# file_inherit
owner @{HOME}/.xsession-errors w,
owner @{user_config_dirs}/tox/[0-9A-F].ftinfo w,
owner @{user_config_dirs}/tox/[0-9A-F].ftoutfo w,
deny /dev/video@{int} rw,
}
include if exists <local/utox>
}

27
apparmor.d/profiles-s-z/volumeicon
View file

@ -10,35 +10,28 @@ include <tunables/global>
@{exec_path} = @{bin}/volumeicon
profile volumeicon @{exec_path} {
include <abstractions/base>
include <abstractions/X>
include <abstractions/gtk>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read>
include <abstractions/freedesktop.org>
include <abstractions/audio>
include <abstractions/dri-enumerate>
include <abstractions/fontconfig-cache-read>
include <abstractions/desktop>
include <abstractions/mesa>
include <abstractions/nameservice-strict>
include <abstractions/wayland>
@{exec_path} mr,
# Volumeicon files
/usr/share/volumeicon/** r,
# Volumeicon config files
owner @{user_config_dirs}/volumeicon/ rw,
owner @{user_config_dirs}/volumeicon/volumeicon* rw,
/var/lib/dbus/machine-id r,
/etc/machine-id r,
# Start the PulseAudio sound mixer
@{sh_path} rix,
@{bin}/pavucontrol rPUx,
@{bin}/pulseeffects rPUx,
# file_inherit
/usr/share/volumeicon/** r,
/var/lib/dbus/machine-id r,
/etc/machine-id r,
owner @{user_config_dirs}/volumeicon/ rw,
owner @{user_config_dirs}/volumeicon/volumeicon* rw,
owner /dev/tty@{int} rw,
include if exists <local/volumeicon>