felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(profile): fix att path in flatpak

Browse source 
fix #820
This commit is contained in:
Alexandre Pujol 2025-08-22 17:57:40 +02:00
parent 8b49f9ebf5
commit 0f017048e4
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 6 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/flatpak/flatpak
View file

@ -77,6 +77,8 @@ profile flatpak @{exec_path} flags=(attach_disconnected,mediate_deleted,complain
owner @{HOME}/.var/ w, owner @{HOME}/.var/ w,
owner @{HOME}/.var/app/{,**} rw, owner @{HOME}/.var/app/{,**} rw,
owner @{att}/@{HOME}/.var/app/*/.local/share/*/logs/* rw,
owner @{att}/@{HOME}/.var/app/*/.local/share/*/**/usr/.ref rw,
# Can create dotfile directories for any app # Can create dotfile directories for any app
owner @{user_cache_dirs}/*/ w, owner @{user_cache_dirs}/*/ w,

4
apparmor.d/groups/flatpak/flatpak-portal
View file

@ -34,8 +34,8 @@ profile flatpak-portal @{exec_path} flags=(attach_disconnected) {
owner /att/**/ r, owner /att/**/ r,
owner @{att}/.flatpak-info r, owner @{att}/.flatpak-info r,
owner @{HOME}/.var/app/*/**/.ref rw, owner @{att}/@{HOME}/.var/app/*/.local/share/*/logs/* rw,
owner @{HOME}/.var/app/*/**/logs/* rw, owner @{att}/@{HOME}/.var/app/*/.local/share/*/**/usr/.ref rw,
owner @{user_config_dirs}/user-dirs.dirs r, owner @{user_config_dirs}/user-dirs.dirs r,
owner @{user_share_dirs}/mime/mime.cache r, owner @{user_share_dirs}/mime/mime.cache r,

4
apparmor.d/groups/freedesktop/xdg-dbus-proxy
View file

@ -29,8 +29,8 @@ profile xdg-dbus-proxy @{exec_path} flags=(attach_disconnected) {
@{exec_path} mr, @{exec_path} mr,
owner @{att}/@{HOME}/.var/app/** r, owner @{att}/@{HOME}/.var/app/** r,
owner @{HOME}/.var/app/*/.local/share/*/logs/* rw, owner @{att}/@{HOME}/.var/app/*/.local/share/*/logs/* rw,
owner @{HOME}/.var/app/*/.local/share/*/**/usr/.ref rw, owner @{att}/@{HOME}/.var/app/*/.local/share/*/**/usr/.ref rw,
@{att}/@{run}/systemd/inhibit/@{int}.ref rw, @{att}/@{run}/systemd/inhibit/@{int}.ref rw,
owner @{run}/firejail/dbus/@{int}/@{int}-{system,user} rw, owner @{run}/firejail/dbus/@{int}/@{int}-{system,user} rw,