felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix #184 (#185)

Browse source 
* Replace @{HOME}/.config with @{user_config_dirs}

* Replace @{HOME}/.cache with @{user_cache_dirs}

* Replace @{HOME}/.local/state with @{user_state_dirs}

* Add missing user_share_dirs to apparmor.d/tunables/home.d/apparmor.d

* Update docs/variables.md

* Replace @{HOME}/.local/share with @{user_share_dirs}

* Replace @{HOME}/.local/lib with @{user_lib_dirs}

* Revert "Add missing user_share_dirs to apparmor.d/tunables/home.d/apparmor.d"

This reverts commit 9525003098.
This commit is contained in:
ShellCode 2023-07-27 13:20:19 +02:00 • committed by GitHub
parent fe0238250a
commit 0f9b7cb474
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
26 changed files with 75 additions and 73 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/apps/discord
View file

@ -8,9 +8,9 @@ include <tunables/global>
@{DISCORD_LIBDIR} = /usr/share/discord
@{DISCORD_LIBDIR} += /usr/share/discord-ptb /opt/discord
@{DISCORD_HOMEDIR} = @{HOME}/.config/discord
@{DISCORD_HOMEDIR} += @{HOME}/.config/discordptb
@{DISCORD_CACHEDIR} = @{HOME}/.cache/discord
@{DISCORD_HOMEDIR} = @{user_config_dirs}/discord
@{DISCORD_HOMEDIR} += @{user_config_dirs}/discordptb
@{DISCORD_CACHEDIR} = @{user_cache_dirs}/discord
@{exec_path} = @{DISCORD_LIBDIR}/Discord{,PTB} @{bin}/discord{,-ptb}
profile discord @{exec_path} {

2
apparmor.d/groups/apps/telegram-desktop
View file

@ -77,7 +77,7 @@ profile telegram-desktop @{exec_path} {
/usr/share/hwdata/pnp.ids r,
owner @{HOME}/.config/qt5ct/{,**} r,
owner @{user_config_dirs}/qt5ct/{,**} r,
/usr/share/qt5ct/** r,
# Allowed apps to open

4
apparmor.d/groups/freedesktop/pipewire-media-session
View file

@ -48,8 +48,8 @@ profile pipewire-media-session @{exec_path} {
/var/lib/gdm{3,}/.local/state/pipewire/media-session.d/* rw,
owner @{HOME}/.local/state/ rw,
owner @{HOME}/.local/state/pipewire/{,**} rw,
owner @{user_state_dirs}/ rw,
owner @{user_state_dirs}/pipewire/{,**} rw,
owner @{user_config_dirs}/pipewire-media-session/ w,
owner @{user_config_dirs}/pipewire/ rw,

2
apparmor.d/groups/freedesktop/xdg-desktop-portal-kde
View file

@ -34,7 +34,7 @@ profile xdg-desktop-portal-kde @{exec_path} {
/etc/xdg/kwinrc r,
owner @{HOME}/.Xauthority r,
owner @{HOME}/.cache/*.kcache r,
owner @{user_cache_dirs}/*.kcache r,
owner @{user_cache_dirs}/icon-cache.kcache rw,

2
apparmor.d/groups/gnome/gnome-keyring-daemon
View file

@ -128,7 +128,7 @@ profile gnome-keyring-daemon @{exec_path} flags=(attach_disconnected) {
owner @{HOME}/@{XDG_SSH_DIR}/{,**} r,
owner @{HOME}/.local/ w,
owner @{HOME}/.local/share/ w,
owner @{user_share_dirs}/ w,
owner @{HOME}/.xsession-errors w,
owner @{run}/user/@{uid}/keyring/ rw,