felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add /etc/xdg/menus and session files to kde-strict.

Browse source 
See #811
This commit is contained in:
Alexandre Pujol 2025-08-15 10:27:44 +02:00
parent eda29668ae
commit 10e57f01a6
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
4 changed files with 14 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/abstractions/desktop
View file

@ -49,6 +49,8 @@
/etc/xdg/kcminputrc r, /etc/xdg/kcminputrc r,
/etc/xdg/kdeglobals r, /etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r, /etc/xdg/kwinrc r,
/etc/xdg/menus/ r,
/etc/xdg/menus/applications-merged/ r,
owner @{user_cache_dirs}/#@{int} rw, owner @{user_cache_dirs}/#@{int} rw,
owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -63,6 +65,11 @@
owner @{user_config_dirs}/kdedefaults/kwinrc r, owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r, owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r, owner @{user_config_dirs}/kwinrc r,
owner @{user_config_dirs}/menus/ r,
owner @{user_config_dirs}/menus/applications-merged/ r,
owner @{user_config_dirs}/session/ rw,
owner @{user_config_dirs}/session/@{profile_name}* rwlk,
owner @{user_config_dirs}/session/#@{int} rw,
owner @{user_config_dirs}/trashrc r, owner @{user_config_dirs}/trashrc r,
# else if @{DE} == xfce # else if @{DE} == xfce

7
apparmor.d/abstractions/kde-strict
View file

@ -25,6 +25,8 @@
/etc/xdg/kcminputrc r, /etc/xdg/kcminputrc r,
/etc/xdg/kdeglobals r, /etc/xdg/kdeglobals r,
/etc/xdg/kwinrc r, /etc/xdg/kwinrc r,
/etc/xdg/menus/ r,
/etc/xdg/menus/applications-merged/ r,
owner @{user_cache_dirs}/#@{int} rw, owner @{user_cache_dirs}/#@{int} rw,
owner @{user_cache_dirs}/icon-cache.kcache rw, owner @{user_cache_dirs}/icon-cache.kcache rw,
@ -39,6 +41,11 @@
owner @{user_config_dirs}/kdedefaults/kwinrc r, owner @{user_config_dirs}/kdedefaults/kwinrc r,
owner @{user_config_dirs}/kdeglobals r, owner @{user_config_dirs}/kdeglobals r,
owner @{user_config_dirs}/kwinrc r, owner @{user_config_dirs}/kwinrc r,
owner @{user_config_dirs}/menus/ r,
owner @{user_config_dirs}/menus/applications-merged/ r,
owner @{user_config_dirs}/session/ rw,
owner @{user_config_dirs}/session/@{profile_name}* rwlk,
owner @{user_config_dirs}/session/#@{int} rw,
owner @{user_config_dirs}/trashrc r, owner @{user_config_dirs}/trashrc r,
owner @{user_share_dirs}/#@{int} rw, owner @{user_share_dirs}/#@{int} rw,

5
apparmor.d/groups/browsers/firefox-kmozillahelper
View file

@ -27,16 +27,11 @@ profile firefox-kmozillahelper @{exec_path} {
/usr/share/kservices{5,6}/{,**} r, /usr/share/kservices{5,6}/{,**} r,
/etc/xdg/menus/ r,
/etc/xdg/menus/applications-merged/ r,
owner @{HOME}/@{XDG_DESKTOP_DIR}/ r, owner @{HOME}/@{XDG_DESKTOP_DIR}/ r,
owner @{HOME}/@{XDG_DESKTOP_DIR}/*.desktop r, owner @{HOME}/@{XDG_DESKTOP_DIR}/*.desktop r,
owner @{user_config_dirs}/kmozillahelperrc r, owner @{user_config_dirs}/kmozillahelperrc r,
owner @{user_config_dirs}/kmozillahelperrc.@{rand6} rwl, owner @{user_config_dirs}/kmozillahelperrc.@{rand6} rwl,
owner @{user_config_dirs}/menus/ r,
owner @{user_config_dirs}/menus/applications-merged/ r,
owner @{user_share_dirs}/kservices5/ r, owner @{user_share_dirs}/kservices5/ r,
owner @{user_share_dirs}/kservices5/searchproviders/ r, owner @{user_share_dirs}/kservices5/searchproviders/ r,

6
apparmor.d/groups/kde/dolphin
View file

@ -51,8 +51,6 @@ profile dolphin @{exec_path} {
/etc/machine-id r, /etc/machine-id r,
/etc/xdg/arkrc r, /etc/xdg/arkrc r,
/etc/xdg/dolphinrc r, /etc/xdg/dolphinrc r,
/etc/xdg/menus/ r,
/etc/xdg/menus/applications-merged/ r,
/etc/xdg/ui/ui_standards.rc r, /etc/xdg/ui/ui_standards.rc r,
# Full access to user's data # Full access to user's data
@ -89,10 +87,6 @@ profile dolphin @{exec_path} {
owner @{user_config_dirs}/knfsshare.{,.@{rand6}} rwk, owner @{user_config_dirs}/knfsshare.{,.@{rand6}} rwk,
owner @{user_config_dirs}/knfsshare.lock rwk, owner @{user_config_dirs}/knfsshare.lock rwk,
owner @{user_config_dirs}/session/ rw,
owner @{user_config_dirs}/session/#@{int} rw,
owner @{user_config_dirs}/session/dolphin_* rwlk -> @{user_config_dirs}/session/#@{int},
owner @{user_cache_dirs}/ksplash/qmlcache/*.qmlc rwl -> @{user_cache_dirs}/dolphin/qmlcache/#@{int}, owner @{user_cache_dirs}/ksplash/qmlcache/*.qmlc rwl -> @{user_cache_dirs}/dolphin/qmlcache/#@{int},
owner @{user_cache_dirs}/ksplash/qmlcache/*.qmlc.@{rand6} rwl -> @{user_cache_dirs}/dolphin/qmlcache/#@{int}, owner @{user_cache_dirs}/ksplash/qmlcache/*.qmlc.@{rand6} rwl -> @{user_cache_dirs}/dolphin/qmlcache/#@{int},