felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Ubuntu 22.04, third batch (#65)

Browse source 
* initial

* ready

* cleanup

* cleanup2

* Update dbus-gtk
This commit is contained in:
nobodysu 2022-09-06 17:00:18 +00:00 • committed by GitHub
parent 672d0a758b
commit 1649b427f8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
9 changed files with 272 additions and 104 deletions
Download patch file Download diff file Expand all files Collapse all files

71
apparmor.d/profiles-a-f/engrampa
View file

@ -10,6 +10,7 @@ include <tunables/global>
profile engrampa @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
include <abstractions/X-strict>
include <abstractions/gtk>
include <abstractions/fonts>
include <abstractions/fontconfig-cache-read>
@ -17,6 +18,60 @@ profile engrampa @{exec_path} {
include <abstractions/nameservice-strict>
include <abstractions/user-download-strict>
include <abstractions/thumbnails-cache-read>
include <abstractions/dbus-session-strict>
include <abstractions/dbus-accessibility-strict>
include <abstractions/dbus-gtk>
include <abstractions/ibus>
dbus send bus=session path=/org/freedesktop/DBus
interface=org.freedesktop.DBus
member=GetId
peer=(name=org.freedesktop.DBus, label=dbus-daemon),
dbus send bus=session path=/ca/desrt/dconf/Writer/user
interface=ca.desrt.dconf.Writer
member={Change,Notify}
peer=(name=ca.desrt.dconf),
dbus send bus=session path=/org/gtk/Private/RemoteVolumeMonitor
interface=org.gtk.Private.RemoteVolumeMonitor
member={IsSupported,List}
peer=(name=:*),
dbus send bus=accessibility path=/org/a11y/atspi/accessible/root
interface=org.a11y.atspi.Socket
member=Embed
peer=(name=org.a11y.atspi.Registry),
dbus receive bus=accessibility path=/org/a11y/atspi/accessible/root
interface=org.freedesktop.DBus.Properties
member=Set
peer=(name=:*),
dbus send bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker
member={ListMounts2,LookupMount}
peer=(name=:*),
dbus receive bus=session path=/org/gtk/vfs/mounttracker
interface=org.gtk.vfs.MountTracker
member=Mounted
peer=(name=:*),
dbus send bus=session path=/org/gtk/vfs/Daemon
interface=org.gtk.vfs.Daemon
member=GetConnection
peer=(name=:*),
dbus receive bus=session path=/org/gtk/Application/anonymous
interface=org.freedesktop.DBus.Properties
member=GetAll
peer=(name=:*),
dbus receive bus=session path=/org/gtk/Application/anonymous{,/window/[0-9]*}
interface=org.gtk.Actions
member=DescribeAll
peer=(name=:*),
@{exec_path} mr,
@ -69,9 +124,12 @@ profile engrampa @{exec_path} {
/usr/share/**.desktop r,
/usr/share/**/icons/**.png r,
/etc/magic r,
/usr/share/glib-2.0/schemas/gschemas.compiled r,
/etc/magic r,
# gnome-tiny
@{run}/mount/utab r,
owner @{PROC}/@{pid}/cgroup r,
owner @{PROC}/@{pid}/fd/ r,
@ -81,15 +139,15 @@ profile engrampa @{exec_path} {
/etc/fstab r,
# Allowed apps to open
/{usr/,}bin/engrampa rPx,
/{usr/,}bin/geany rPx,
/{usr/,}bin/viewnior rPUx,
/{usr/,}bin/spacefm rPx,
/{usr/,}bin/engrampa rPx,
/{usr/,}bin/geany rPx,
/{usr/,}bin/viewnior rPUx,
/{usr/,}bin/spacefm rPx,
/{usr/,}bin/ristretto rPUx,
# file_inherit
owner /dev/tty[0-9]* rw,
profile open {
include <abstractions/base>
include <abstractions/xdg-open>
@ -115,6 +173,7 @@ profile engrampa @{exec_path} {
# file_inherit
owner @{HOME}/.xsession-errors w,
include if exists <local/engrampa_open>
}
include if exists <local/engrampa>