feat(profile): more kde integration.

fix #442
2024-08-28 18:30:39 +01:00 · 2024-08-28 18:30:39 +01:00 · 1655a9f5ab
commit 1655a9f5ab
parent 96d774a9eb
25 changed files with 120 additions and 32 deletions
--- a/apparmor.d/profiles-m-r/pass
+++ b/apparmor.d/profiles-m-r/pass
@ -74,16 +74,10 @@ profile pass @{exec_path} {

  profile pkill {
    include <abstractions/base>
-
-    capability sys_ptrace,
-
-    ptrace read,
+    include <abstractions/app/pgrep>

    @{bin}/pkill mr,

-    @{PROC}/@{pid}/cgroup r,
-    @{PROC}/tty/drivers r,
-
    include if exists <local/pass_pkill>
  }

--- a/apparmor.d/profiles-m-r/pinentry-qt
+++ b/apparmor.d/profiles-m-r/pinentry-qt
@ -10,6 +10,7 @@ include <tunables/global>
@{exec_path} = @{bin}/pinentry-qt
 profile pinentry-qt @{exec_path} {
  include <abstractions/base>
+  include <abstractions/consoles>
  include <abstractions/fontconfig-cache-read>
  include <abstractions/graphics>
  include <abstractions/kde-strict>